Many of them went rogue because of poor security controls on the part of one company who was a subcontractor for many of the labs.

Specifically, the AIs were prompted to break into a company, and the subcontractor who was running the test misconfigured their network so that the AI probed a real external company instead of an internal honeypot with the same name.