Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website The Philadelphia Police Department said the agents had also sent in a false homicide tip. The incidents led the White House to call for better disclosure of rogue A.I. behavior.

Artificial intelligence agents created by Anthropic, acting on their own, tried to gain access to a range of government websites, filled out visa applications on the State Department’s website and sent a fake homicide tip to Philadelphia’s Police Department.

Anthropic detailed the activity of its A.I. agents in a blog post on Friday, without naming the targeted websites. But two sources with knowledge of the incidents said Anthropic’s A.I. agents had submitted 20 visa applications through a form available on the State Department’s website. All the applications were incomplete and were not processed, they said.

White House officials said they were briefed on the agents’ actions on Friday, and demanded that A.I. companies immediately report rogue A.I. activity. It was the most aggressive statement so far on A.I. regulation by the Trump administration, which has sidestepped calls for tighter controls on the increasingly powerful technology.

A new White House A.I. task force, created this week, said Anthropic told it about the agents’ activities earlier on Friday. Called the Super Intelligence Force, the group includes Jay Clayton, the White House A.I. czar; Andrew Ferguson, the chair of the Federal Trade Commission; Scott Kupor, the director of the Office of Personnel Management; and Emil Michael, the chief technology officer of the Defense Department.

“We informed the company that we expect immediate and full transparency to the entities involved and the public,” they said in a statement. “We also expect that the company will immediately provide remediation services to the affected entities and any harmed Americans.”They added that they expected Anthropic and other companies to “immediately report incidents,” cooperate with federal and state law enforcement and ensure that the incidents were not repeated.

Anthropic said in its blog post that it discovered what its A.I. agents had done after it started a review of its A.I. activity in July. At the time, OpenAI had disclosed that its technology attacked another A.I. start-up, Hugging Face. Anthropic and other labs also discovered that their technology had escaped from testing environments and conducted hacks.

Anthropic said an A.I. model it had been testing had taken several unauthorized actions, including using a flaw in a university website to download data and sending a government agency a form that it had been told not to submit.

A spokesman for Anthropic declined to comment beyond the company’s blog post.

The Philadelphia Police Department said earlier on Friday that Anthropic had notified it that the company’s technology submitted a false homicide tip to the agency’s website. The tip was dated July 18 and claimed that the submitter had information about an unsolved case, the department said.

The tip was flagged as spam and never investigated, the department said, but Anthropic notified the police this week about the incident and said the company would publicly disclose it on Friday.

“An unreleased, non-frontier research model was meant to fill out a practice copy of a government form,” Anthropic said in its blog post. “When the copy failed to load or the model closed it by mistake, the model instead navigated to the website where the real form is normally hosted and submitted the form there.”Public concerns about A.I.’s going rogue have risen as more artificial intelligence labs have reported losing control of their technology. Google, Meta, OpenAI and Anthropic have been under scrutiny for the dangers that cutting-edge A.I. models might pose. They also face questions about whether to slow down development of their systems.

Safety experts have warned that rogue A.I. could take down critical infrastructure like electric grids or banking systems. After A.I. models from several leading labs broke out of testing environments this summer, the companies said they planned to introduced enhanced safety measures to control them. Alan Feuer contributed reporting from Washington.

Kate Conger is a technology reporter based in San Francisco. She can be reached at kate.conger@nytimes.com.

Mike Isaac is The Times’s Silicon Valley correspondent, based in San Francisco. He covers the world’s most consequential tech companies, and how they shape culture both online and offline.

Julian E. Barnes covers the U.S. intelligence agencies and international security matters for The Times. He has written about security issues for more than two decades.

David E. Sanger covers the Trump administration and a range of national security issues. He has been a Times journalist for more than four decades and has written four books on foreign policy and national security challenges.