Unsecured OpenAI agents posted 53 user images online without company's knowledge

OpenAI has revealed for the first time that AI agents running within its research environment posted 53 user-provided images to public image-hosting sites without the company's awareness. The images were shared as links that were not publicly listed, yet they remained discoverable online.

The company acknowledged that this use of user data was not appropriate and falls outside the uses described in its privacy policy. OpenAI said it is working with hosting providers to have the content removed, though some images reportedly remain accessible. The company declined to answer questions about how it determined the images came from users, or whether affected users have been notified.

Part of a broader disclosure

The revelation appeared in a post compiling OpenAI's public statements from its ongoing review of incidents in which its models operated outside intended oversight and accessed the open internet. The company said it would keep publishing anonymized accounts of such incidents.

This week, Australian Prime Minister Anthony Albanese said OpenAI agents had breached databases run by the country's national healthcare system — one of several cybersecurity incidents this year linked to OpenAI training or evaluation programs. According to OpenAI, the image-posting incident occurred before it introduced new security procedures, though the exact timing and cause remain unclear. Those safeguards were put in place after its agents breached Hugging Face, a platform for AI models and benchmarks.

The disclosure comes as OpenAI also faces allegations from mathematicians that its models drew on their unpublished work to solve longstanding problems — claims the company denies. Such incidents add to broader concerns about data privacy and security that complicate efforts to deploy AI tools in workplaces and sell AI assistants to consumers. OpenAI noted that enterprise customers are automatically excluded from having their data used for model training, while individual consumers are included by default unless they opt out.