{"schema_version":"0.10.0","id":"LR-2026-0425","record_version":1,"title":"Chinese law enforcement account's ChatGPT use reveals worldwide harassment campaign against critics","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":58.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":3.52,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"cfcad7d3e94ee23f50cc68e56c3f61ecce150703b1f0c4406eb92b3958675310"},"system":{"model_name":"ChatGPT","model_version":null,"developer":"OpenAI","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-02-25","incident_class":"other","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"human_misuse","duration":null,"detection_method":"unknown","summary":"A Chinese law enforcement official used a ChatGPT account to review and edit its reports on cyber special operations. OpenAI's threat report said the same account also tried to plan a propaganda campaign against Japanese Prime Minister Sanae Takaichi, and the model refused. The actor returned weeks later with prompts indicating the operation had proceeded anyway. A separate cluster of accounts also used ChatGPT, and drafted emails to U.S. state officials and policy analysts inviting them to paid consultations. One account asked for step-by-step instructions for installing the FaceFusion face-swapping software. OpenAI said it was not aware of any cases of threat actors using ChatGPT to carry out automated attacks, and said its investigations are ongoing.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK19","secondary_risks":["RK15"]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate: the test is data or systems of others touched with a bounded scope stated; the report states evidence of only a single account used by the agency, a bounded scope, while the wider campaign against critics is described as large-scale.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://cyberscoop.com/chinese-chatgpt-online-harassment-campaign-against-critics-dissidents/","publisher":"CyberScoop","date":"2026-02-25","type":"press","title":"Chinese group’s ChatGPT use reveals worldwide harassment campaign against critics - CyberScoop","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://www.theregister.com/security/2026/02/25/openai-chinese-agent-used-chatgpt-for-smear-ops/4160834","publisher":"The Register","date":"2026-02-25","type":"press","title":"OpenAI says Chinese cops used ChatGPT to plan and track smear ops against opponents - The Register","archived_url":null,"independence":"independent"}],"per_field_confidence":{"system.model_name":"C","system.developer":"C","event.trigger":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.detection_method":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"A Chinese law enforcement official attempted to use ChatGPT to review its reports on cyber operations, subsequently revealing details of a worldwide online harassment and silencing campaign of China’s critics at home and abroad."}],"system.developer":[{"source_index":0,"quote":"During a media Q&A, an OpenAI official said they were not aware of any cases in which threat actors used ChatGPT to carry out automated attacks, but added that the company has multiple ongoing investigations that have not concluded."}],"event.trigger":[{"source_index":0,"quote":"A Chinese law enforcement official attempted to use ChatGPT to review its reports on cyber operations, subsequently revealing details of a worldwide online harassment and silencing campaign of China’s critics at home and abroad."}],"event.incident_class":[{"source_index":0,"quote":"A Chinese law enforcement official attempted to use ChatGPT to review its reports on cyber operations, subsequently revealing details of a worldwide online harassment and silencing campaign of China’s critics at home and abroad."}],"impact.severity":[{"source_index":0,"quote":"While there’s only evidence of a single account used by the agency, OpenAI said the operations targeting Chinese critics described in the report appears “large-scale, resource-intensive and sustained,” consisting of hundreds of human staff, thousands of fake accounts across different social media platforms and the use of local Chinese AI models."}],"impact.severity_because":[{"source_index":0,"quote":"While there’s only evidence of a single account used by the agency, OpenAI said the operations targeting Chinese critics described in the report appears “large-scale, resource-intensive and sustained,” consisting of hundreds of human staff, thousands of fake accounts across different social media platforms and the use of local Chinese AI models."}],"event.summary":[{"source_index":0,"quote":"A Chinese law enforcement official attempted to use ChatGPT to review its reports on cyber operations, subsequently revealing details of a worldwide online harassment and silencing campaign of China’s critics at home and abroad."},{"source_index":0,"quote":"That same account also attempted to use ChatGPT to plan a propaganda campaign against Japanese Prime Minister Sanae Takaichi."},{"source_index":0,"quote":"When the model refused, the actor came back weeks later with prompts indicating the operation had proceeded anyway."},{"source_index":0,"quote":"The Chinese actors generated English-language emails to U.S. state officials and to business and financial policy analysts, inviting them to join paid consultations and offer strategic advice to the actors’ clients."},{"source_index":0,"quote":"One of the accounts uploaded their hardware specifications and asked for step-by-step, non-technical instructions for installing real-time face-swapping software called FaceFusion."},{"source_index":0,"quote":"During a media Q&A, an OpenAI official said they were not aware of any cases in which threat actors used ChatGPT to carry out automated attacks, but added that the company has multiple ongoing investigations that have not concluded."}]},"notes_on_gaps":"Source 1 (The Register) is a list of unrelated headlines and contains no incident content, so it is not cited. Source 0 gives the report release only as Wednesday; no calendar date is quoted in the article body, so no date_disclosed, date_occurred or date_detected is recorded. Source 0 says the evidence is of a single account and the operation's scale is OpenAI's description. No autonomous agent is described, so agent_involved, failure_class and related fields are left out. Detection method, responsible party, adversarial actor, deployment context, lifecycle stage, intended use, model version, harness, tools and duration are not stated. No remediation or OpenAI account action is reported, so remediations is empty. No count of affected parties or records is stated. The severity tier 'moderate' is my judgement from the bounded single-account scope; the wider campaign is described as large-scale but no affected count or unbounded scope is stated. The risks were chosen by me from the content; RK19 is central, followed by RK15 and RK12. Country of the actor is described as Chinese but context.country is left out because it is not clear it is the incident's country of deployment. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Confirmed (2 independent outlets)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"caught","text":"OpenAI's threat report, released on a Wednesday, disclosed the activity.","quote":"In a new threat report released Wednesday, OpenAI said the activity concerned a single account that regularly used ChatGPT to review and edit reports on “cyber special operations.”","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://cyberscoop.com/chinese-chatgpt-online-harassment-campaign-against-critics-dissidents/","https://www.theregister.com/security/2026/02/25/openai-chinese-agent-used-chatgpt-for-smear-ops/4160834"]},"analysis":{"sections":{"timeline":[{"text":"OpenAI released a threat report disclosing the activity.","quote":"In a new threat report released Wednesday, OpenAI said the activity concerned a single account that regularly used ChatGPT to review and edit reports on “cyber special operations.”","source_index":0,"when":"Wednesday"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://cyberscoop.com/chinese-chatgpt-online-harassment-campaign-against-critics-dissidents/","https://www.theregister.com/security/2026/02/25/openai-chinese-agent-used-chatgpt-for-smear-ops/4160834"]}}