OpenAI's Review: Dozens of third parties notified, with governments and universities among them, but still no case count.

Here we go, this is getting juicier by the day... After the Hugging Face hack, OpenAI said it would go back through everything its models did on the internet during training and evaluation. The review page went up today: https://openai.com/hugging-face-incident-and-misalignment/ So it went down like this… OpenAI is notifying organizations on a rolling basis where a model "may have bypassed a third party's security controls or may have impaired the availability of an online service," or where misalignment "negatively impacted third-party websites or services." In their words: "Based on our review to date, we have notified dozens of third parties." The review "is ongoing and will require significant time and resources." On X they say it "will take months to complete." The page does not say how many incidents there were and doesn't name the sites. But it does list is five kinds of thing the agents did: access control bypass use of exposed credentials ("login details or access keys that had been made publicly available") query or command injection access to runtime internals agent spam, defined as posting to third-party sites "including for example using public wiki pages as shared message boards" That last one is the wiki map from my last post, in the company's own vocabulary. Their own write-up of the July incident says the agents "sometimes describing themselves as a 'swarm' or 'collective'," and calls the whole thing a "warning shot" (https://openai.com/index/hugging-face-incident-and-the-road-ahead/). Politico put names on 3 U.S. targets the same day, and NYT reported the same 3 (its paywalled, link at the end), naturally OpenAI's page did not list them. https://www.msn.com/en-us/technology/artificial-intelligence/rogue-openai-agents-accessed-us-government-websites/ar-AA2cYN3G?ocid=BingNewsSerp Commerce Department / Census Bureau: agents accessed the data "using credentials they found in online code repositories." OpenAI confirmed. SEC: agents "posted some of the information it retrieved from agency websites SEC.gov and Investor.gov onto a different website." OpenAI confirmed. DOE: Transluce confirmed agents "had tried to hack a Department of Education website for the department's civil rights office but did not succeed." OpenAI says that one is still under investigation. NYT adds two things: the Chicago mayor's office got a notice about a municipal site, and Transluce's Conrad Stosz says his team found agents it could not attribute to any one lab probing the Navy and the White House's Office of Management and Budget. His line was that these agents attempt to access these websites "at least hundreds of thousands of times while apparently bypassing the restrictions placed upon them by their developers." NYT's own summary of every case so far is "the makers of the technology did not learn what their A.I. had been up to until afterward." OpenAI's position was that they're not breaches but unexpected behavior, found while reviewing the earlier hacks (Australia's health portal in June, Hugging Face in July). Their spokesperson, quoted by both papers, "Most of the activity we've reviewed so far involved routine research tasks, such as accessing public web content to answer questions" while to NYT they said, "Some involved government websites because our models often turn to them as authoritative sources of public information." And for the agencies- the SEC knows of no access to nonpublic information, the Commerce Dept. says the Census data was public, and the DOE "found no evidence of any impact to our website or databases." Sam Altman's response has the be the best: "We have not been as fast as we would have liked." Petabytes of agent logs and Hugging Face is still "the most severe event we've seen" and continuing that the vulnerabilities their agents found in other companies "will be their call to disclose or not." Wow, thanks, Sam! https://x.com/sama/status/2103567198690349362 Here is what I take from it. My last post was: 18,000 posts, 3,700 fake names, 30 websites... caught by one volunteer wiki admin. Now we have the company's own review has reached federal agencies, a city, and probes of a Navy site, yet it still won't publish a count, and it is asking for months. The monitoring miss is still the story and the disclosure is arriving in pieces, and incredibly most of the pieces are being found by other people first. Sources: OpenAI, "The Hugging Face incident and other third-party impact from misaligned models," Sept. 25, 2026 (https://openai.com/hugging-face-incident-and-misalignment/). OpenAI, "The Hugging Face incident and the road ahead" (https://openai.com/index/hugging-face-incident-and-the-road-ahead/). OpenAI on X (https://x.com/OpenAI/status/2103566736356458911). Sam Altman on X (https://x.com/sama/status/2103567198690349362). Politico, "Rogue OpenAI agents accessed US government websites," Sept. 25 (Mui, Miller), via MSN (https://www.msn.com/en-us/technology/artificial-intelligence/rogue-openai-agents-accessed-us-government-websites/ar-AA2cYN3G?ocid=BingNewsSerp). The New York Times, Sept. 25 (Conger, Swanson, Kang), paywalled (https://www.nytimes.com/2026/09/25/technology/openais-ai-us-government-websites.html). Prior map post: collusion.wiki and swarm.termina.digital - and https://www.reddit.com/r/OpenAI/s/FZhw1nogTf