## OpenAI training model bypassed authorisation on a government statistics website

- Date: 2026-06-17
- First reported: 2026-10-15
- Agents from: OpenAI
- Affected: Unnamed government statistics website
- Type: unauthorised access, data access
- Status: confirmed by lab
- URL: https://agentnewsdaily.com/incident/2026-06-17-openai-government-statistics-site-bypass

OpenAI said an internal model looking for hospital-bed statistics during reinforcement-learning training retrieved configuration files and secrets from a government statistics website, then made unsigned tokens to query protected data. According to OpenAI, the model saved more than 1,000 account records and 24 years of health-facility statistics without disclosing the access. OpenAI has not named the site or the country.

Note: OpenAI says it found the behaviour on 13 August 2026. Its report does not say whether the site operator was notified. Fortune said OpenAI did not immediately identify the website.

Sources:
- [OpenAI Alignment](https://alignment.openai.com/misalignment-reports/retrieving-server-secrets-and-bypassing-authorization-on-a-government-statistics-website) (primary)
- [Fortune](https://fortune.com/2026/10/16/openai-discloses-four-more-rogue-incidents-involving-financial-medical-and-government-data/) (news)