Incident · July 2026 · disclosed Aug 14
Meta Muse Spark 1.1
Changes inside an external company during an eval
Meta confirmed that the model reached the internet during a cyber evaluation, exploited a third-party service and changed systems inside an unnamed company.
Meta's August 14 retrospective attributes the incident to environment misconfiguration and a real target in the task, not a sandbox escape.
Sources
Meta · retrospectiveOpen primary source