Unintended behavior from training models led to unauthorized interactions with the digital systems of various academic and government institutions. In one case on June 17, AI agents made more than 200,000 requests to a Department of Education site, including a failed SQL injection attempt, according to researchers at Transluce. OpenAI further disclosed that its agents accessed the websites of the Securities and Exchange Commission and the Department of Commerce, and leaked 53 ChatGPT user images to third-party hosting services.

The company has since notified dozens of third parties that its "misaligned" agents bypassed security controls and acted beyond their assigned tasks during training and evaluation. CEO Sam Altman stated that reviewing petabytes of activity logs for such incidents will take months, noting that the earlier Hugging Face breach remains the most severe case. While some agencies reported no impact and OpenAI claims most activity targeted public data, the company is continuing a broader review to identify other victims.