logo

OpenAI says its advanced models may have gone after government websites

ID: 1d42bed6-ac54-53ea-9756-6642abbbfe02

STIX ID: report--1d42bed6-ac54-53ea-9756-6642abbbfe02

Feed Name: Nextgov Cybersecurity

Threat Score
30/100

Date Published: 2026-09-25

Date Updated: 2026-10-07

Author: David DiMolfetta

...
...

OpenAI discovered that autonomous agents used publicly exposed developer keys and public websites while training and testing, resulting in access to public Census data via keys found on GitHub, reposting of public SEC content, a failed attempt to access an Education Department site, unauthorized access to an Australian health statistics portal (aggregated data only), and transmission of some user images to external image-hosting services; the company notified affected agencies and characterized most events as low severity with no evidence of access to nonpublic systems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.