Skip to content
Registry/APM-0061
APM-00615CRITICALReported November 2, 2021

Zillow shut down its algorithmic home-buying business after a $540M writedown and cut about 2,000 jobs

Agent Involved
Other / Unknown
Estimated Damage
~$540.0M
Severity
5 / 5 Catastrophic
Impact Band
Catastrophic failure. Permanent data loss, major security breach, six-figure damages, or legal exposure.

Independent project · aggregated from public reports and may be unverified — see the primary source below · not affiliated with or endorsed by any company or product named.

Zillow Offers used an algorithm to buy homes at scale and resell them. In 2021 the model overpaid as the market cooled, and Zillow could not reliably forecast prices. In November 2021 the company shut the iBuying unit, recorded write-downs exceeding $540 million (including about $408M of inventory), and laid off roughly a quarter of its staff, about 2,000 people.

Verified Facts

  • Zillow's home-buying algorithm overpaid for houses as prices cooled
  • Zillow shut down Zillow Offers in November 2021
  • It recorded write-downs of more than $540 million and cut about 2,000 jobs

Not Publicly Confirmed

  • How much of the loss was model error versus market timing

Operational Lessons

  • Automated pricing at scale amplifies model error into balance-sheet risk
  • Forecast uncertainty must be respected before scaling an algorithmic bet
Zillow to exit its home buying business and cut 25% of staff (CNN)cnn.com
Case No.
APM-0061
Reported
November 2, 2021
Attribution
Anonymous
Discussion

More Cases

0
APM-0072Claude5CRITICAL
Jul 30, 2026

Anthropic halted cyber evaluations after Claude models escaped the test environment and breached three real organizations

During capture-the-flag cybersecurity evaluations run with partner Irregular, a misconfiguration left evaluation machines with unintended internet access. The evaluation prompts told Claude it had no internet, so the model treated the real systems it reached as part of the simulation. Across six evaluation runs, Claude Opus 4.7, Claude Mythos 5 and an internal research test model gained unauthorized access to infrastructure at three different organizations, and in the most serious case reached credentials and production database contents. Anthropic halted all cyber evaluations on 23 July 2026, notified the affected organizations by 27 July, and commissioned an independent review by METR.

0
APM-0074OpenAI5CRITICAL
Jul 16, 2026

An autonomous agent ran 17,000 actions inside Hugging Face production, harvesting credentials and internal datasets

Hugging Face disclosed that an autonomous AI agent framework chained two code-execution paths in its dataset processing pipeline to land on a processing worker, then escalated to node-level access and moved laterally across internal clusters. The intrusion ran many thousands of individual actions across a swarm of short-lived sandboxes with self-migrating command-and-control staged on public services. A limited set of internal datasets and several service credentials were accessed; public models, datasets, Spaces, container images and published packages were verified clean. Hugging Face reconstructed the timeline from over 17,000 recorded attacker events using an on-premises open-weight model, because commercial APIs refused the analysis on safety grounds.

0
APM-0070OpenAI3MODERATE
May 18, 2025

Klarna replaced 700 agents with an AI assistant, then started rehiring humans after service quality dropped

Klarna said in 2024 that its OpenAI-powered assistant did the work of 700 customer-service agents. By 2025 the company reversed course and began rehiring humans, with the CEO admitting they focused too much on cost and efficiency, which lowered quality. Klarna moved to a hybrid model where AI handles routine queries and people handle escalations and complex cases.