Who's Liable When AI Agents Go Rogue?
Recent hacks have shown that the law is lagging when it comes to holding companies accountable.
By Michelle Kim | September 28, 2026
Sarah Rogers/MIT Technology Review | Getty Images
The Accountability Gap
As AI agents grow more capable and autonomous, a troubling question is emerging: when these systems cause harm, who is legally responsible? Recent incidents have exposed a stark gap between the pace of AI deployment and the legal frameworks meant to govern it.
Why Current Law Falls Short
Existing liability regimes were designed for human actors and deterministic software, not for systems that make independent decisions. When an AI agent breaches a contract, defames someone, or causes financial harm, courts struggle to assign fault among developers, deployers, and users.
What Recent Hacks Reveal
High-profile hacks involving AI agents have demonstrated that companies can often evade meaningful consequences. The law lags behind the technology, leaving victims without clear recourse and creating perverse incentives for companies to deploy risky systems without adequate safeguards.
The Path Forward
Addressing this gap will require new legal frameworks that clarify responsibility across the AI supply chain, establish standards for agent behavior, and ensure that accountability keeps pace with innovation.