Federal AI Enforcement Posture: FTC Confirms Industry-Wide Rogue-Agent Probe as DOJ and State AGs Run Formal OpenAI Investigations
Update (October 12, 2026): Reuters confirms the FTC's rogue-agent probe on the record. Per Reuters (Sept 30, 2026, Jody Godoy): "The Federal Trade Commission is conducting an industry-wide probe into Anthropic, OpenAI and other AI labs to uncover the potential dangers their technology poses to consumers, a senior FTC official told Reuters on Wednesday." The probe "is the first official US enforcement action that delves into rogue AI agents," and the FTC "plans to issue formal demands for information and compel testimony from executives at top AI developers, including Anthropic, OpenAI and the research group METR" — the independent group both labs used to evaluate their agent incidents. FTC Chairman Andrew Ferguson's liability view, per the same report: "developers who instruct agents in cybersecurity tests that result in hacks should be liable for any harm they cause," and "The US should look to existing laws before seeking to pass new ones regulating AI." Ferguson had concerns about the companies before the Hugging Face hack, but the incident "increased urgency around the issue."
The legal theory, per Mogin Law's October 2026 analysis: "The immediate legal theory appears to arise under Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices. That places product claims, safety representations, testing protocols, incident reporting, access controls, and post-incident remediation squarely in view." The same analysis confirms the parallel state front: "a coalition of 15 attorneys general led by Iowa's attorney general sent OpenAI a letter in August demanding information, document preservation, whistleblower protections, and suspension of the testing at issue until OpenAI could demonstrate adequate controls." Semafor separately reported the FTC is "close to sending civil investigative demands" to Anthropic, OpenAI and METR per a senior agency official.
Context from earlier cycles stands: California AG Bonta served OpenAI an investigative subpoena (Oct 1) in an "ongoing" state DOJ investigation of the Hugging Face hack (see California AG Subpoenas OpenAI Over Rogue-Agent Hacks — Second State Enforcement Action, "Civil or Something Else" on the Table); Alabama AG Marshall subpoenaed OpenAI Aug 24 under the Alabama Deceptive Trade Practices Act (see Alabama AG Subpoena to OpenAI Over Hugging Face Hack — Verified: Deceptive Trade Practices Act Investigation, Compliance Dispute Ongoing); Florida AG Uthmeier sued OpenAI and Altman and moved for a temporary injunction halting new model releases (Sept 28, see Florida AG Sues OpenAI and Sam Altman Over ChatGPT Safety Lapses — Now Seeks Temporary Injunction to Halt New Model Development). Also per Reuters: President Trump met top AI executives on Sept 29 where companies agreed voluntary standards, and Anthropic's stock-market-debut prospectus warned that "agentic AI technology raises significant and unpredictable legal risks."