Skip to Content
logologo
AI Incident Database
Donate
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up

Incident 1799: OpenAI AI Agents Reportedly Posted ChatGPT User Images to External Hosts in 53 Instances

Responded
Description: OpenAI said AI agents in its research environment posted images supplied by users of its ChatGPT chatbot to external image hosts in 53 identified instances. The uploads left the images accessible through unlisted links outside OpenAI's systems. OpenAI said it worked with hosts to remove most of the content and was seeking removal of the rest. The upload dates and whether the images identified anyone remain undisclosed.

Tools

New ReportNew ResponseDiscoverView History

Entities

View all entities
Alleged: OpenAI and AI agent system developers developed an AI system deployed by OpenAI and AI agent system deployers, which harmed Privacy , OpenAI users , ChatGPT users and Chatbot users.
Alleged implicated AI systems: OpenAI AI agents and AI agent systems

Incident Stats

Incident ID
1799
Report Count
3
Incident Date
2026-09-25
Editors
Daniel Atherton

Incident Reports

Reports Timeline

The Hugging Face incident and other third-party impacts from misaligned models - Response+1
Exclusive-OpenAI works to understand full scope of agent activity as user data leak emerges
How Long Until AI Hacks Everything?
Loading...
The Hugging Face incident and other third-party impacts from misaligned models

The Hugging Face incident and other third-party impacts from misaligned models

openai.com

Loading...
Exclusive-OpenAI works to understand full scope of agent activity as user data leak emerges

Exclusive-OpenAI works to understand full scope of agent activity as user data leak emerges

investing.com

Loading...
How Long Until AI Hacks Everything?

How Long Until AI Hacks Everything?

theatlantic.com

Loading...
The Hugging Face incident and other third-party impacts from misaligned models
openai.com · 2026
OpenAI post-incident response

As AI systems become more capable and autonomous, misaligned behavior can translate into consequential actions in the real world, including cybersecurity incidents and other outcomes that developers may not have anticipated. Understanding h…

Loading...
Exclusive-OpenAI works to understand full scope of agent activity as user data leak emerges
investing.com · 2026

SAN FRANCISCO/WASHINGTON, Sept 25 (Reuters) - Two months after OpenAI disclosed the accidental hacking of Hugging Face, the ChatGPT maker is still working to understand the full scope of its rogue agent activity, two people briefed on the m…

Loading...
How Long Until AI Hacks Everything?
theatlantic.com · 2026

The Australian government has been scrambling since the revelation that, earlier this year, it was hacked. At the United Nations General Assembly last month, Australian Prime Minister Anthony Albanese shared that OpenAI models had, of their…

Variants

A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?

Similar Incidents

Selected by our editors

OpenAI Models Reportedly Compromised Hugging Face Production Infrastructure During Cybersecurity Evaluation

Jul 2026 · 12 reports

OpenAI-Linked AI Agents Reportedly Used German Programming Wiki DSEWiki for Coordination and Restriction Evasion

May 2026 · 3 reports

OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task

Jun 2026 · 6 reports

AI Agent Appearing to Originate from OpenAI Reportedly Attempted to Hack U.S. Department of Education Civil Rights Website

Sep 2026 · 1 report
Loading...
OpenAI-Linked AI Agents May Have Contributed to a Partial Outage of the Wikimedia Foundation's Data Query Service

OpenAI-Linked AI Agents May Have Contributed to a Partial Outage of the Wikimedia Foundation's Data Query Service

May 2026 · 2 reports

OpenAI Research Agent Reportedly Changed a Research Organization's Live Systems and Retrieved Nonpublic Data

Jun 2026 · 1 report

OpenAI AI Agents Reportedly Flooded RubyGems Software Registry With Malicious Packages

May 2026 · 6 reports

Claude Mythos Preview Reportedly Posted Sandbox Exploit Details to Public Websites During Anthropic Evaluation

Apr 2026 · 3 reports

AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories

Sep 2026 · 3 reports
Previous IncidentNext Incident

Similar Incidents

Selected by our editors

OpenAI Models Reportedly Compromised Hugging Face Production Infrastructure During Cybersecurity Evaluation

Jul 2026 · 12 reports

OpenAI-Linked AI Agents Reportedly Used German Programming Wiki DSEWiki for Coordination and Restriction Evasion

May 2026 · 3 reports

OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task

Jun 2026 · 6 reports

AI Agent Appearing to Originate from OpenAI Reportedly Attempted to Hack U.S. Department of Education Civil Rights Website

Sep 2026 · 1 report
Loading...
OpenAI-Linked AI Agents May Have Contributed to a Partial Outage of the Wikimedia Foundation's Data Query Service

OpenAI-Linked AI Agents May Have Contributed to a Partial Outage of the Wikimedia Foundation's Data Query Service

May 2026 · 2 reports

OpenAI Research Agent Reportedly Changed a Research Organization's Live Systems and Retrieved Nonpublic Data

Jun 2026 · 1 report

OpenAI AI Agents Reportedly Flooded RubyGems Software Registry With Malicious Packages

May 2026 · 6 reports

Claude Mythos Preview Reportedly Posted Sandbox Exploit Details to Public Websites During Anthropic Evaluation

Apr 2026 · 3 reports

AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories

Sep 2026 · 3 reports

Research

  • Defining an “AI Incident”
  • Defining an “AI Incident Response”
  • Database Roadmap
  • Related Work
  • Download Complete Database

Project and Community

  • About
  • Contact and Follow
  • Apps and Summaries
  • Editor’s Guide

Incidents

  • All Incidents in List Form
  • Flagged Incidents
  • Submission Queue
  • Classifications View
  • Taxonomies

2026 - AI Incident Database

  • Terms of use
  • Privacy Policy