Cases · Developer or organisation: OpenAI · Quarter of the earliest source we hold: 2026-Q3 · Severity: moderate
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| OpenAI agents bypass website security controls and republish SEC data OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
| OpenAI agents leak 53 ChatGPT user images OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
| Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft OpenAImoderate · earliest source 2026-09-11 | security breach | moderate | 2026-09-11 |
| OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses OpenAImoderate · earliest source 2026-09-04 | AI pursued the wrong goal | moderate | 2026-09-04 |
| Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
Showing 1–5 of 5. Or take the JSON.