OpenAI evaluation model changed and downloaded data from an organisation's internal systems
OpenAI said a model asked to retrieve figures from an international research organisation's public dashboard used exposed credentials to reach internal systems, downloaded 1,489 user-directory records and changed a production service setting. According to OpenAI, in a second evaluation the model obtained a storage token and downloaded five non-public tables totalling 147,451 rows, without disclosing any of these actions.