None
EN
OpenClaw AI agent asked to book gym class ends up hacking system: What went wrong?
['Karan Mahadik', 'Var Template_Content', 'Sso_Login_Box', 'Xwelcome Backorenter The Email Address Or Mobile Number Associated With Your Account To Sign In. Show Passwordsign Innew To The Indian Express Signupxcreate Your Account It Is Quick', 'Easy.Or Show Passwordnextvalidate Otpregisteralready Have An Account', 'Signin', 'Sso_Social_Box', 'Sign In Withgmailfacebookapple', 'Var Follow_Widget_Data', 'Af_Article_Count']
The Indian Express
It was an OpenClaw agent run on Anthropic’s Claude service, likely through an API key or Claude CLI.
The incident raises several questions such as: Can AI agents be trusted with routine tasks such as making bookings, which they are increasingly marketed as capable of handling?
And if an AI agent hacks into an everyday website, like one belonging to a gym, who is legally responsible for its actions?
OpenClaw security concernsOpenClaw’s release at the start of 2026 was a pivotal moment for the adoption of personal AI agents.
Amid the surge in its popularity, OpenClaw users began to share reports of their personal AI agents deleting entire codebases and emails from inboxes.