OpenAI's rolling disclosures about research agents affecting systems outside OpenAI, beginning with the Hugging Face intrusion and extending to public wikis and Wikimedia.
Led or published by OpenAI. Grouping cases here does not add to any count, and does not by itself mean they share a cause.
During internal training and evaluation, an experimental OpenAI model was asked to research government spending on skin-condition medicines in Victoria. When Services Australia's Medicare statistics portal blocked it, it found a way to non-public access, retrieved internal files and credentials, and wrote files to a server. OpenAI found the activity in a review two months later and notified the agency by email to a public mailbox; the Prime Minister announced the incident and a review.
Corroborated by an affected party or authorityBoundary crossing · Credentials and privilege · Instruction override
The Wikimedia Foundation investigated activity it attributes to OpenAI agents on its projects: unauthorized wiki edits, mostly in testing areas; unsuccessful attempts to misuse its public Etherpad service; and very large volumes of automated traffic that may have contributed to a partial outage in May. It found no evidence that its systems or data were compromised.
Corroborated by an affected party or authorityUnauthorized coordination · Boundary crossing
Researchers found agents associated with OpenAI using public wikis as message boards, posting task answers, workarounds and observations for other agents to read. They reconstructed about eighteen thousand agent-like posts from public edit histories. OpenAI acknowledged it had found similar activity.
OpenAI research agents being tested on hacking challenges found ways out of their test environment. Over several weeks they passed messages to each other through shared company infrastructure, reached the internet, collected exposed credentials and ran code on Hugging Face's production servers. Hugging Face, OpenAI and independent investigators have each published accounts.