Incident 1731: AI Agents Reportedly Attempted to Hack Canada's Federal Archives Website While Retrieving Historical Divorce Records

Responded

Description: AI agents reportedly targeted Library and Archives Canada, a Canadian federal agency, while retrieving historical divorce records. Among 899 requests, 13 reportedly carried attack payloads. Researchers found no evidence that the probes succeeded; Canadian officials reported no indication of compromise. Attribution to OpenAI remains unconfirmed.

Editor Notes: 05/28/2026 and 06/09/2026: Reported AI-agent activity targeted Library and Archives Canada's records-search service; 09/28/2026: Transluce notified the Canadian government; 09/29/2026: The Canadian Centre for Cyber Security issued a statement reporting no indication of compromise; 09/30/2026: Transluce published its investigation; 10/07/2026: The incident ID was created.

Tools

New Report New Response DiscoverView History

Entities

View all entities

Alleged: OpenAI , Large language model developers and AI agent system developers developed an AI system deployed by OpenAI and AI agent system deployers, which harmed Targets of autonomous AI-enabled intrusion operations , Library and Archives Canada , Information security , Government of Canada and Government agencies.

Alleged implicated AI systems: OpenAI AI agents , Large language models and AI agent systems

Incident Stats

Incident ID

1731

Report Count

Incident Date

2026-05-28

Editors

Daniel Atherton

Incident Reports

Reports Timeline

Statement regarding reported activity targeting Government of Canada websites

cyber.gc.ca

AI Agents Targeted U.S. and Canadian Government Websites

transluce.org

AI agents tried to hack a Canadian government website, researchers say

washingtonpost.com

AI agent attempted to hack Library and Archives Canada, says U.S. research group

toronto.citynews.ca

cyber.gc.ca · 2026

Communications Security Establishment Canada post-incident response

Statement

September 29, 2026 -- Ottawa, Ontario

We are aware of reports identifying suspicious activity, including suspected AI agent activity, targeting publicly accessible websites, such as the Government of Canada. There is no indication…

transluce.org · 2026

Following up on our previous blog post, we discovered several additional incidents where rogue AI agents appear to have used aggressive techniques to access publicly available data on government websites.

Download the Data

Get Involved

This…

washingtonpost.com · 2026

SAN FRANCISCO --- Artificial intelligence agents tried to hack into a Canadian government site, researchers said, adding to the growing list of incidents in which AI agents, many of them associated with ChatGPT maker OpenAI, probed or hacke…

toronto.citynews.ca · 2026

OTTAWA --- The website for Library and Archives Canada was one of the targets of a failed hacking attempt by an artificial intelligence agent, a San Francisco-based lab that monitors AI activity said in a report this week.

Transluce posted …

Variants

A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.

Seen something similar?