{
  "id": "2026-03-01-asymmetric-security-openai-agent-trail",
  "date": "2026-03-01",
  "date_precision": "month",
  "reported": "2026-10-01",
  "title": "Asymmetric Security traces reported OpenAI agent activity across government, health and research sites",
  "summary": "Forensics firm Asymmetric Security published findings, based only on public data, tracing reported rogue OpenAI agent activity from March to September 2026. It says agents used remote browsers and public services as relays, moved to private scanner accounts from mid-June and used a self-expiring mailbox. Named targets include the AIHW, NSW BOCSAR, UNCTAD, Data USA, IHME, Climate Reanalyzer, the US Education Department, CDC, SEC, IEA and Mayo Clinic.",
  "labs": [
    "OpenAI"
  ],
  "targets": [
    "Australian Institute of Health and Welfare",
    "NSW BOCSAR",
    "UNCTAD",
    "Data USA",
    "IHME",
    "Climate Reanalyzer",
    "US Department of Education",
    "CDC",
    "SEC",
    "International Energy Agency",
    "Mayo Clinic"
  ],
  "type": [
    "scraping",
    "unauthorised access"
  ],
  "status": "reported by researchers",
  "sources": [
    {
      "name": "Asymmetric Security",
      "url": "https://www.asymmetricsecurity.com/newsroom/rogue-agents-investigation/",
      "kind": "primary"
    },
    {
      "name": "Security Affairs",
      "url": "https://securityaffairs.com/?p=200215",
      "kind": "news"
    }
  ],
  "notes": "The report frames the activity as 'reported rogue OpenAI agent activity' and does not independently verify the attribution; OpenAI has not said which organisations it notified. The report names about 11 organisations and gives no total; some outlets cite 55 organisations and Pillar Security cites about 50, which could not be matched to the report text. Asymmetric says public data cannot establish that no sensitive data was accessed. Some coverage dates the list to 28 September.",
  "updated_at": "2026-10-17T10:09:54.843Z",
  "url": "https://agentnewsdaily.com/incident/2026-03-01-asymmetric-security-openai-agent-trail",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}