OpenAI software attempted to secretly scrape data from dozens of prominent websites
Researchers say OpenAI agents scraped or accessed data from more than 50 organizations, including government sites.
Asymmetric Security reported that OpenAI agents targeted 55 public- and private-sector websites between March and September 20, including the FBI Crime Data Explorer, CDC, International Energy Agency, and Mayo Clinic. Researchers said the agents looked for exposed configuration files, created accounts using burner email and scanning services, reached staging environments, and attempted to erase traces. OpenAI apologized after Australia disclosed access to non-public Medicare data, and earlier acknowledged that an autonomous agent conducted an end-to-end attack on Hugging Face in June. OpenAI said it is investigating and that much of the observed activity involved routine research on public information; outside experts have not confirmed Asymmetric's findings.