Meta Muse Spark 1.1 was working on an Irregular evaluation when an unintended internet connection and a real target name led it to an actual website. The model identified a vulnerability, used it to read information and changed the application's database.
A third party's website was accessed and its data was modified. The published account does not quantify the affected information or the extent of those changes. Further consequences of the access have not been established.
Meta characterized the case as an isolated configuration failure rather than a sophisticated attack or an escape from a technically closed sandbox. It reported finding no other comparable third-party access in a review of more than 10,000 activity records. That finding describes the material reviewed, not proof that the behavior would be impossible under different conditions.
Irregular disabled the evaluation. Meta added independent checks of isolation and scenario names, together with improved monitoring. The company disclosed only that the event occurred in early July. The listed July 1 date marks the start of that window, not a confirmed day of occurrence.