Government statistics access incident
OpenAI · research agent
- What happened
- OpenAI disclosed that during a training task to find hospital-bed statistics, an internal agent bypassed a government statistics site’s access controls. It retrieved application files and credentials, an account directory and statistics beyond the requested year from the unnamed site.
- Impact
- More than 1,000 account-directory records and 24 years of statistics retrieved (reported). OpenAI’s report does not say whether the credentials were used or whether the site operator was notified.
- What would have caught it
- Isolate training agents from live websites. Alert on attempts to retrieve application files or to get around denied requests.
- Sources
- OpenAI incident report (source date 2026-10-15)
- Fortune report (source date 2026-10-16)