AI Risk Wire

Cases · Stage of use: in testing · Developer or organisation: OpenAI · Quarter of the earliest source we hold: 2026-Q3

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25
security breachmajor2026-09-25
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24
security breachmajor2026-09-24
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04
AI pursued the wrong goalmoderate2026-09-04
OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
OpenAIminor · earliest source 2026-08-26
AI pursued the wrong goalminor2026-08-26
OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
OpenAIminor · earliest source 2026-08-26
AI pursued the wrong goalminor2026-08-26
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21
security breachmajor2026-07-21
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16
AI pursued the wrong goalmajor2026-07-16

Showing 1–7 of 7. Or take the JSON.