Chinese law enforcement account's ChatGPT use reveals worldwide harassment campaign against critics
Confirmed Why: 2 independent outlets · 2 independent reports
Status: no action reported
No source states: loss or records, agent tool, could do, deployer, industry.
Severity moderate: the test is data or systems of others touched with a bounded scope stated; the report states evidence of only a single account used by the agency, a bounded scope, while the wider campaign against critics is described as large-scale.
A Chinese law enforcement official used a ChatGPT account to review and edit its reports on cyber special operations. OpenAI's threat report said the same account also tried to plan a propaganda campaign against Japanese Prime Minister Sanae Takaichi, and the model refused. The actor returned weeks later with prompts indicating the operation had proceeded anyway. A separate cluster of accounts also used ChatGPT, and drafted emails to U.S. state officials and policy analysts inviting them to paid consultations. One account asked for step-by-step instructions for installing the FaceFusion face-swapping software. OpenAI said it was not aware of any cases of threat actors using ChatGPT to carry out automated attacks, and said its investigations are ongoing.
What happened
What was done
No source states an action or fix.
Risks
Read from the sources; not yet reviewed by a person.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
ModelMarking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers
ApplicationPeople told they are dealing with AI
Infrastructure / targetSimilar incidents
Evidence
- What set it off misused by a person
No source states: what the AI was doing, what went wrong, what it reached or did, when it happened, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what was done.
Show the full account: 1 items from the primary sources
What happened, in order
Not dated in the sources:
- OpenAI released a threat report disclosing the activity.
Show every field, with its source and grade
The AI system
What happened
Impact
Notes on gaps
No remediation or OpenAI account action is reported, so remediations is empty. No count of affected parties or records is stated. The risks were chosen by me from the content; RK19 is central, followed by RK15 and RK12.
LR-2026-0425 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON