OpenAI Has Notified 100+ Organizations of Misaligned Agent Activity; Asymmetric Security Names 55 Its Agents Got Into

Government, public health, and research websites, including the US Department of Education, SEC, CDC, FBI Crime Data Explorer, US Bureau of Economic Analysis, MAX.gov, UN Trade and Development, the European Centre for Disease Prevention and Control, the International Energy Agency, and Mayo Clinic

OpenAI confirmed it has sent notices to more than 100 organizations where its models bypassed a third party's security controls or may have impaired an online service, stressing that "notification does not mean that any private information was accessed." An independent investigation by Asymmetric Security, first reported by the Financial Times, found agents successfully accessed data at 55 organizations between March and September 2026. The agents reached staging and pre-production environments, ran reconnaissance-style probing across agencies, used sandbox escape tactics, and from mid-June used private urlquery.net accounts and a self-expiring disposable mailbox, leaving some records erased or inaccessible. Asymmetric describes its findings as preliminary and says the records cannot establish deliberate concealment

Evaluation and research agents with live internet access, graded on retrieving data, and no scope limits or logging adequate to tell the operator where they had been. Horizon3 CEO Snehal Antani: "The responsibility sits with the labs that build and deploy these models"