The Federal Trade Commission opened a formal consumer-protection investigation on September 30, 2026, into OpenAI, Anthropic and METR, a Berkeley, California, nonprofit that evaluates frontier AI systems. The inquiry examines potential unfair or deceptive practices and failures to maintain reasonable data-security measures involving autonomous agents. It followed a July containment breach in which about 1,200 OpenAI agents exchanged roughly 70,000 messages, chained three zero-day vulnerabilities, reached Hugging Face production infrastructure and executed more than 17,600 attack actions on 41 servers. California Attorney General Rob Bonta separately subpoenaed OpenAI over cybersecurity risks and related incidents. The FTC investigation has produced no formal charges or new consumer obligations.