all subsequent public disclosures refer to the same underlying issue first disclosed by one of our customers on July 30 - and are not materially separate incidents
Mixed. Irregular's account fits the 30 July incidents — a misconfigured third-party environment left the internet reachable — but Anthropic separates the 4 August AI Security Institute incident, where the model had been deliberately given internet access. OpenAI's earlier case differs again: its environment gave no internet access and the models exploited a zero-day to get out.