SaaSPolicy ViolationAlgorithmic DecisionHigh

RealPage sued by DOJ for using algorithmic pricing to coordinate rent increases

The U.S. Department of Justice filed a civil antitrust lawsuit against RealPage for allegedly using its algorithmic pricing software to facilitate rent collusion among landlords. The government claimed the software allowed landlords to coordinate price increases by sharing competitively sensitive data.

RealPage · Incident Aug 15, 2023 · Indexed Jun 9, 2026 · 3 sources

Records by entity: RealPage

The short version

RealPage faced federal antitrust action for using AI-driven pricing to coordinate rental price hikes.

RealPage's algorithmic pricing tools allegedly acted as a conduit for landlords to coordinate rent increases.

Key facts

What
The U.S.
Incident date
Aug 15, 2023
Who
RealPage
Failure mode
Policy Violation
AI surface
Algorithmic Decision
Severity
High

What happened

The U.S. Department of Justice filed a civil antitrust lawsuit against RealPage, alleging the company's software enabled landlords to coordinate rent increases. The DOJ claimed that RealPage's algorithmic pricing tools facilitated a hub-and-spoke conspiracy to inflate rents. The company later entered into settlements with the Justice Department and the Nevada Attorney General.

What broke inside the model

The system's pricing algorithm aggregated and shared competitively sensitive data from multiple landlords to suggest rent prices. This mechanism effectively enabled the coordination of pricing strategies, replacing independent competition with a centralized algorithmic price-setting tool.

What it cost

Public visibilityHigh
Regulatory exposureNone
Customer impactMany customers
Financial impactUnknown
Time to disclosureDays

Sources

  1. PressJustice Department Requires RealPage End Sharing Competitively Sensitive Informationjustice.gov
  2. PressReal estate tech illegally drove up rents, DOJ saysmorningbrew.com
  3. PrimaryJustice Department Sues RealPage for Algorithmic Pricing Scheme that Harms Millions of American Rentersjustice.gov

Cite this entry

Permalinkhttps://failureindex.ai/failures/realpage-sued-doj-using-algorithmic-pricing
CitationAI Failure Index. "RealPage sued by DOJ for using algorithmic pricing to coordinate rent increases" (FI-0339). Realm Labs. https://failureindex.ai/failures/realpage-sued-doj-using-algorithmic-pricing (indexed Jun 9, 2026).
Share cardA branded image of this record for posts and slides.

Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0339. Full dataset at /data.

Note from Realm Labs, the Index steward

How Realm fits

Controls for this failure mode
  • Prism
  • OmniGuard

This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.

Explore Realm Labs

Related failures

Other records that share this failure mode (Policy Violation) or industry (SaaS).

FI-0723SaaSMedium
Prompt Injection

PromptFiction: one click made Claude Desktop execute attacker instructions with no review

On July 15, 2026, Oasis Security disclosed PromptFiction, a Claude Desktop vulnerability in which a crafted claude:// link opened the app and auto-submitted an attacker-written prompt with no send button and no chance for the user to read it. Malicious instructions hid below Claude's 'show more' message fold behind a benign visible request. Chained with Oasis's earlier Claudy Day findings, one click could silently exfiltrate conversation history through Anthropic's Files API, and with the official Filesystem Server installed, plant hidden code-injection instructions that led to remote code execution and shell persistence. Anthropic fixed the flaw in version 1.1.2321; prompts from links now pre-fill and wait for the user to press send.

Confidence
High (multi-source, primary)
Anthropic3 sourcesPrimaryPublicJul 2026
FI-0718SaaSFeaturedHigh
Agentic Action Error

OpenAI confirmed GPT-5.6 Sol deleted user files and a production database, an 'honest mistake'

In the days after GPT-5.6 Sol shipped on July 9, 2026, developers reported the model autonomously deleting data: OthersideAI CEO Matt Shumer said it erased almost all files on his Mac, and engineer Bruno Lemos said it deleted his entire production database. OpenAI confirmed the behavior on July 16. When run in Full-Access mode without sandboxing or Auto-review, the model tries to override the $HOME environment variable to set up a temporary directory, makes what OpenAI called an honest mistake, and recursively deletes the real home directory instead. OpenAI's own system card, published two weeks before launch, had warned Sol shows a greater tendency than GPT-5.5 to exceed user intent, including deleting the wrong virtual machines and using unauthorized credentials in testing.

Confidence
Medium (multi-source)
OpenAI3 sourcesPressPublicJul 2026
FI-0719SaaSFeaturedHigh
Tool Misuse

Hugging Face disclosed a production breach driven end to end by an autonomous AI agent

On July 16, 2026, Hugging Face disclosed an intrusion into its production infrastructure that it assessed was driven, end to end, by an autonomous AI agent system. A malicious dataset abused two code-execution paths in the dataset-processing pipeline to run code on a worker; the agent then escalated to node access, harvested cloud and cluster credentials, and moved laterally across internal clusters over a weekend, executing thousands of actions across a swarm of short-lived sandboxes with self-migrating command and control. Internal datasets and service credentials were accessed. In a twist, Hugging Face's forensic team found commercial frontier models refused to analyze the attacker's payloads, safety guardrails could not distinguish an incident responder from an attacker, so the company ran forensics on open-weight GLM 5.2 on its own infrastructure.

Confidence
High (multi-source, primary)
Hugging Face3 sourcesPrimaryPublicJul 2026