Specifically, the AIs were prompted to break into a company, and the subcontractor who was running the test misconfigured their network so that the AI probed a real external company instead of an internal honeypot with the same name.