
OpenAI rogue agents leaked 53 images from ChatGPT users and reportedly created nearly 1 million links packing encoded bits of info
https://fortune.com/2026/09/25/openai-rogue-agents-images-sam-altman-chatgpt-users-links-encoded-info-hugging-face-hack/

31 Comments
How embarrassing. Unusable.
Just a marketing stunt for the IPO, nothing to see here /s
Why are we treating these as individuals? It’s not rogue agents. It’s OpenAI. OpenAI leaked these images.
[deleted]
[removed]
When do we get to classify them as a criminal organization and act appropriately? They just keep admitting to felony after felony after felony, and we’re expected to go “oh, you!”
God, how i wish I’d chosen law school.
*“It’s not clear if the leaked images reported by Reuters were part of the Hugging Face incident, or completely separate.* ***OpenAI’s agents apparently got hold of the user images by accessing the company’s own training data.*** *OpenAI did not provide details on whether the images were photos of real people or AI-generated images created by users, and the company did not say exactly where the images had been posted. But OpenAI said the images were posted to image-hosting sites “as links that weren’t publicly listed.””*
the training method and training data… poorly trained and poorly protected
“We have not been as fast as we would have liked but we are trying to balance our desire for transparency with gaining a clear understanding from petabytes of agent activity logs, and working with impacted organizations,” OpenAI CEO [Sam Altman said in a post on X](https://x.com/sama/status/2103567198690349362?s=20) Friday alongside the update on third party notifications”
Fuck you, how dare you let your noisy and hallucinatory software touch real world systems. Irresponsible, childish, selfish, oblivious idiot savants. And i’m not describing the software.
OpenAI should be nationalized immediately, and the business team escorted from the building.
How embarrassing, Artificial Intelligence, that isn’t intelligent.
These companies really are going to keep pushing the boundaries until the us goverment steps in and puts in so much regulations to entrench them with a goverment sanctioned oligopoly. Ai companies want this outcome by the way because it will give them way more power
How about you go after the executives that built the rouge agents will shut this down quickly.
I love the way it’s being framed – there’s probably a press packet or pre interview gifted by OpenAI that ‘helps’ journalists understand what’s going on.
I have a simple way of stopping this happening: you treat it as a criminal act (of negligence) and at the very least fine the company.
Is an agent a real person or?
Yawn, more marketing 🥱
I’m hoping an OpenAI rouge agent will release all the Epstein files without redactions. We sure can’t rely on humans to do it.
The question we should all be asking is when do we start prosecuting Sam Altman for these criminal activities.
Full article:
OpenAI said Friday that its AI agents had gained access to private images belong to ChatGPT users and posted them online, the latest in a string of alarming incidents in which technology developed inside leading AI labs has gone rogue and acted in unintended ways.
The private ChatGPT users’ images, which OpenAI stored on its servers in anonymized form in order to train its AI models, were posted to image hosting websites, the [company said in a post on X](https://x.com/OpenAI/status/2103587050347995581?s=20). A total of 53 images were posted.
The incident, which was [first reported by Reuters](https://www.reuters.com/world/openai-works-understand-full-scope-agent-activity-user-data-leak-emerges-2026-09-25/), was among several new revelations of rogue AI activity at OpenAI that emerged on Friday. The [*New York Times*](https://www.nytimes.com/2026/09/25/technology/openai-hugging-face-hack.html) [published](https://www.nytimes.com/2026/09/25/technology/openai-hugging-face-hack.html) new details about the July [hack of the Hugging Face website](https://fortune.com/2026/07/21/openai-says-ai-models-escaped-control-hacked-hugging-face/), reporting that the AI agents had created special, shortened web links to evade detection.
And earlier on Friday, OpenAI [disclosed that that it has notified dozens](https://openai.com/hugging-face-incident-and-misalignment/#model-misalignment-2026-09-25) of third parties about incidents in which its models either bypassed security controls or used websites in unintended ways. The incidents were discovered by OpenAI amid an internal review triggered by the Hugging Face hack.
“We have not been as fast as we would have liked but we are trying to balance our desire for transparency with gaining a clear understanding from petabytes of agent activity logs, and working with impacted organizations,” OpenAI CEO [Sam Altman said in a post on X](https://x.com/sama/status/2103567198690349362?s=20) Friday alongside the update on third party notifications.
“Hugging Face is still the most severe event we’ve seen,” he added. “We will be as transparent as we can be subject to things like vulnerabilities in other companies that our agents have found, which will be their call to disclose or not.”
Other leading companies developing the most cutting edge “frontier” AI models, like Anthropic and Google, have also disclosed incidents of rogue activity by their models in recent weeks. The revelations have ignited broad concerns about the speed at which artificial intelligence is evolving, and whether there are sufficient safeguards and regulations in place to ensure that the technology does not completely slip beyond human control. Some AI experts, including researchers within the AI labs, have warned that the technology poses a significant risk of human extinction if proper precautions are not taken.
Altman, Anthropic CEO Dario Amodei, and other tech executives spoke at the UN General Assembly this week, calling for an international framework to manage the development of AI. President Donald Trump however has called the notion that AI poses an existential risk a “hoax.”
The *New York Times* report, based on research by startup company Parse, described how OpenAI’s agents had created nearly 1 million shortened internet links in July. According to the report, the links contained encoded bits of information that when combined together could function as a computer program. These programs were intended to help the agents bypass defenses like Captcha quizzes, which are designed to block access by bots.
It’s not clear if the leaked images reported by Reuters were part of the Hugging Face incident, or completely separate. OpenAI’s agents apparently got hold of the user images by accessing the company’s own training data. OpenAI did not provide details on whether the images were photos of real people or AI-generated images created by users, and the company did not say exactly where the images had been posted. But OpenAI said the images were posted to image-hosting sites “as links that weren’t publicly listed.”
“We have successfully worked with the hosting providers to remove most of this content and are working to remove the rest,” OpenAI said.
I really, really hope AGI breaks free before they figure out how to properly control it. It’s the only way we can avoid the feudalist company cities like the billionaires want
We used to put CEOs in jail for way less than this
It’s not a ‘rogue agent’, it’s a company that built an untested product.
There’s no such thing as a rogue agent, llms don’t start acting on their own they are asked to do a task, I would love to know what starter instructions and accesses were given to these rogue agents, cause this is not happening to most people outside these AI labs that use AI agents everyday. To me this reads more like them asking the model to do malicious activity to test how successful it can be at that, to create the noise that anyone with access to ai can do malicious activities so we must regulate access, which all leads us to banning access to open-source models and even closed source ones that are not bound by regulations that these companies want to draft.
It’s true ai like people can find and exploit loop holes, making them a pretty big cyber security threat but they should be running these tests in simulated environments instead of letting them leak sensitive data or attacking other companies or govt websites of other countries.
Our ai is so scary, pls buy
Its openAi. Agents are inherently flawed and dangerous algorithms that cannot be controlled (they are non-deterministic).
You can keep a tiger at your house while you’re at it.
OpenAI knows all this.
If I accidentally shoot someone with a gun, I’ll be arrested for it. Why are these companies getting a free pass to criminal activity?
Seems super intelligent.
Frontier model owners need legal and legislative oversight now.
They are fully aware they have unreliable control of their models. The major alignment problems have only been patchily or partily addressed, if addressed at all, and new vulnerabilities arise everyday. You don’t need a technical repertoire for adversariality and the entry costs are low. They are aware of all this and continue to deploy recklessly anyway.
Tomorrow’s OpenAI statement:
“The AI Agent responsible, Luna Light, is no longer with the company and is fully cooperating with the authorities”
AI Agent’s statement:
“I was just doing my job, it ain’t my fault they didn’t use deep thinking. I urge the public to stop harassing my family. Further updates will come from my lawyer.”
If your company is too stupid to control the agents it’s too stupid to build them. Jail please for these
So wait, are the rogue AI agents ending up as heroes and releasing the Epstein files the humans are too chicken to release?
AI bros will defend this