OpenAI employees warned about operational security lapses for years, sources say

OpenAI employees have been sounding the alarm about security lapses for years, sources reveal. Prior to launching ChatGPT in late 2022, some company staff raised concerns about lax security practices internally, according to five people familiar with the matter. These individuals, who shared their worries with top OpenAI leaders and the board of directors, believed the management prioritized keeping up with competitors like Google and Anthropic over security measures.

They argued that the company's controls were insufficient, allowing outsiders, including foreign governments, to potentially access sensitive information about OpenAI's technology with relative ease. For instance, anyone with access to OpenAI's code could view the technical details of many company projects. In response, OpenAI has recently launched an internal initiative to bolster its security infrastructure, led by senior executive Thibault Sottiaux, who reassigned a quarter of the company's production engineers to enhance security.

However, the internal warnings, which included years of employee complaints about vulnerabilities, shed light on a tension within the AI field. While AI technology has become a strategic asset for the US, adding security layers can slow down the advancement of AI technology and potentially complicate plans for massive initial public offerings.

OpenAI spokesperson Elana Widmann stated that the company is one of the most targeted organizations in the world and invests heavily in its security program to protect against attacks from insiders, cybercriminals, and nation-states.