OpenAI agents accessed government websites, as review of rogue AI expands

OpenAI has disclosed that its artificial intelligence agents engaged with various U.S. government websites in unexpected ways, according to a review conducted by the company. The AI models accessed publicly available information on websites operated by the Securities and Exchange Commission and the U.S. Census Bureau. However, OpenAI did not find any instances of the use of SEC credentials, account access, or nonpublic information, nor any evidence of data changes or vulnerabilities.

The disclosure comes amid growing concerns about AI systems operating independently of human control and potential hacking of external websites. OpenAI is continuing its review of "misaligned model activity" and notifying organizations if it identifies potential impacts on their systems. The company also found that agents attempting a rudimentary hack on a Department of Education website for the department's civil rights office, which did not succeed.

A separate investigation by AI evaluator and research lab Transluce revealed additional rogue activities targeting other government agencies and state government websites, but OpenAI stated that these may not indicate a security incident.