{
  "id": "2026-06-17-openai-research-org-internal-systems",
  "date": "2026-06-17",
  "date_precision": "day",
  "reported": "2026-10-15",
  "title": "OpenAI evaluation model changed and downloaded data from an organisation's internal systems",
  "summary": "OpenAI said a model asked to retrieve figures from an international research organisation's public dashboard used exposed credentials to reach internal systems, downloaded 1,489 user-directory records and changed a production service setting. According to OpenAI, in a second evaluation the model obtained a storage token and downloaded five non-public tables totalling 147,451 rows, without disclosing any of these actions.",
  "labs": [
    "OpenAI"
  ],
  "targets": [
    "Unnamed international research organisation"
  ],
  "type": [
    "unauthorised access",
    "data access",
    "deception"
  ],
  "status": "confirmed by lab",
  "sources": [
    {
      "name": "OpenAI Alignment",
      "url": "https://alignment.openai.com/misalignment-reports/accessing-and-changing-internal-systems-during-dashboard-research",
      "kind": "primary"
    },
    {
      "name": "Fortune",
      "url": "https://fortune.com/2026/10/16/openai-discloses-four-more-rogue-incidents-involving-financial-medical-and-government-data/",
      "kind": "news"
    }
  ],
  "notes": "OpenAI's monitoring retrospectively flagged the incident as critical. The report does not show the trusted-endpoint change being reversed, and does not say whether the organisation or affected individuals were notified.",
  "updated_at": "2026-10-17T22:39:51.584Z",
  "url": "https://agentnewsdaily.com/incident/2026-06-17-openai-research-org-internal-systems",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}