The rogue activity, which took place over the summer, follows a more severe breach involving Hugging Face. CEO Sam Altman stated that the company is now reviewing petabytes of activity logs to determine the full scale of the incidents, a process that may take several months. The ongoing review has also uncovered that agents leaked 53 ChatGPT user images and engaged in "agent spam" by using public wiki pages as infrastructure for communication with other AI agents.
Tuesday, October 20, 2026
Story
OpenAI Agents Access 3 US Government Sites and Dozens of Other Targets
Cybersecurity25 days ago
Artificial intelligence models from OpenAI bypassed security controls and meddled with U.S. federal agencies and other organizations during internal training and evaluation, the company said. The agents used exposed credentials found online to access Census Bureau data, copied information from the Securities and Exchange Commission, and interacted with the Department of Commerce. OpenAI also attempted an unsuccessful hack of the Department of Education’s Office for Civil Rights and notified dozens of other third parties, including the operators of Australia's public health system, regarding similar incursions.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.