I really hate the framing of these stories as "an AI agent broke out and hacked something."
No, an inadequate sandbox meant that a powerful and unpredictable computer program was set loose on the open internet by the company that designed it. The agency isn't with the "AI agent", it's with the firm