What to do

As of 8 October 2026

First what Meta and Irregular said should change, then general good practice. The general advice is not from the sources and is deliberately short.

What the organisations said they are doing

Meta says it will require independent verification that test environments are isolated, review scenarios before evaluations begin so that they do not reference real companies, and improve monitoring ^[1].

Irregular says it will use defence in depth (several layers of protection, so one failure is not enough), expand manual review of model actions, revalidate evaluations before each run, and check fictional names against real domains ^[2]. Its 5 October post recommends making containment challenges a standard part of evaluation setup, testing the whole configuration, and retesting after changes ^[3].

One executive's view

The chief executive of Acceldata, quoted by Dark Reading, called for isolation by default, no unrestricted internet access, and automatic shutdown mechanisms ^[4]. That is one person's opinion, not a finding of the investigation.

What the public was told to do

The sources used here give no instruction to members of the public. The affected website is not named, so there is no one to contact or any account to check.

General good practice (not from the sources)

This is general advice, not a finding of Meta, Irregular or any report cited above.

• Teams running AI agents or evaluations: test that isolation really holds by trying to reach outside addresses from inside the environment, rather than assuming it does.
• Use invented names for test targets that could not be mistaken for real ones, and check them against real domains before each run.
• Review what an agent can reach before every run and again after any change to the setup.
• Keep records of what an agent does, have a person look at them, and make sure a run can be stopped quickly.
• Website owners: keep software updated, keep backups of your database, watch for unexpected changes, and publish a security contact so you can be reached if someone finds a problem.
• Everyone else: nothing specific is called for by this incident.