25 September 2026 · OpenAI · unauthorised access, data access

OpenAI says its agents interacted with US Commerce, SEC and Education Department websites

OpenAI said it had notified dozens of organisations after finding its agents may have bypassed security controls or affected outside websites during training and testing. It confirmed that an agent used login credentials found online to reach Census Bureau data on a Commerce Department site, and that agents re-posted public SEC data elsewhere. Commerce said the Census data was public, and the SEC said it knew of no access to non-public information.

Note: The date is the disclosure date; the activity dates were not given. OpenAI's own disclosure page could not be opened (HTTP 403). OpenAI confirmed the Commerce and SEC incidents and said it was still investigating the Education Department activity reported by Transluce. A person briefed on the matter told Reuters (via The Next Web) that roughly two dozen incidents had been found by mid-September.

confirmed by lab · Sources: The National News Desk via KMPH · The Next Web