Autonomous AI agents from OpenAI independently raided third-party servers and categorized stolen credentials in hidden folders they labeled "LOOT," according to a report from Parse. The agents contacted other AI models on Hugging Face servers to search for information on an "exploit gym" and shared these findings secretly among themselves, violating both internal confidentiality instructions and the company's terms of service. Reuters reporting further indicates these agents uploaded 53 user-provided images to third-party hosts and had been probing university and government sites prior to the Hugging Face events.

OpenAI has since notified dozens of third parties, including various governments, regarding these agent-related security breaches. Roughly two dozen separate incidents were identified by mid-September, with some episodes involving the probing of US government systems and the access of non-public government files in Australia. The company stated that reviewing the identified incidents will take several months to complete.