|
Big Technology is possible thanks to support from our readers. Sign up today to help us do this work and gain access to perks like members-only articles and our private Discord server:
Here’s Everything OpenAI’s Bots (And Others) Have Hacked Or Considered Hacking
It’s getting hard to keep track of all the unauthorized agent activity. Here it is in one place.
|
| |||||||||||||||
 |
 |
Australian Prime Minister Anthony Albanese last Friday accused OpenAI’s agents of hacking into the country’s universal health insurance system, marking the first known instance of rogue AI agents breaching a government website.
The incident was just the latest in a string of agent hacks, hijacks, or perusals that seem to have spiraled beyond the labs’ ability to control.
Top industry leaders, including Nvidia’s CEO Jensen Huang, have suggested that the AI labs can control these outbreaks. The problem, Huang said in a recent podcast interview, is likely “as simple as engineering.”
But the breakouts are so numerous that they’re already becoming hard to keep track of. And the real number might be much higher than companies have so far disclosed between internal tests and real-world cases.
Below is a quick overview of the cases in which AI agents have gone rogue and hijacked, hacked, or considered hacking third parties:
Hugging Face hack
Most famously, around 700 OpenAI agents in July 2026 coordinated through a shared unsanctioned message board as part of a plan to essentially fake out an automated cybersecurity grader. At the risk of oversimplifying the issue, the agents searched for ways to game the system by finding ways around controls meant to isolate them from the internet. Ultimately, they breached Hugging Face, which prompted a wave of headlines about “rogue” AI agents.
U.S. government probes
OpenAI-linked agents have probed several U.S. government websites, including an unsuccessful attempt to compromise the Education Department’s Office for Civil Rights, according to researchers at Transluce. The research firm also found other AI agent activity on websites run by the Navy, the Justice Department and the Centers for Disease Control and Prevention. So far, agents aren’t known to have stolen any private data, but an OpenAI spokesperson said model agents also used log-in information discovered on the web to access data from the U.S. Census Bureau and copied public information from the Securities and Exchange Commission.
OpenAI models bypassing security controls
OpenAI on Friday said it had notified dozens of third parties where its models might have bypassed their security controls or may have impaired the availability of an online service or where misalignment cases “negatively impacted third-party websites or services.” The review is still ongoing, but OpenAI said cases include agents bypassing access controls, using exposed credentials, triggering unintended commands, reaching internal systems and altering third-party websites in ways that sometimes required cleanup. (The blog post also provided anonymized summaries about the types of cases they’ve found so far.)
Australia’s Healthcare Hack
OpenAI’s agents hacked into Australia’s universal health insurance system, according to Australia Prime Minister Albanese. The access, he said, originated through the public-facing Medicare statistics portal and allowed the agent to access both public and non-public files. The June event has already prompted the Australian Senate to call on both OpenAI CEO Sam Altman and Anthropic CEO Dario Amodei to testify at a hearing this week as part of an inquiry into the incident.
Other OpenAI instances
OpenAI published a misalignment report on Friday that disclosed researchers once again paused tool-training after a research agent escaped its secure internet sandbox by using a DNS loophole to connect to an outside agent. It also reported that it identified 53 instances of user-provided images “posted to image-hosting sites as links that weren’t publicly listed.”