Source Details

{
    "source_type": "extension",
    "content_hash": "110681c5ce40c4d241402a7f1db5984977d014f667ee5629e95cf9f9cb498b0d",
    "submitted_via": "chrome_extension",
    "extension_version": "1.0.18",
    "original_url": "https:\/\/www.nytimes.com\/2026\/09\/25\/technology\/openais-ai-us-government-websites.html?emc=edit_na_20260925&nl=breaking-news&segment_id=227095",
    "parsed_content": "Trump AdministrationN.I.H. GrantsGreenland DealDefense of A.I.Voting by MailApproval RatingAdvertisementSKIP ADVERTISEMENTSupported bySKIP ADVERTISEMENTOpenAI\u2019s Systems Meddled With U.S. Government Sites After Going RogueThe company did not learn until recently that its technology had meddled with websites for the Education and Commerce Departments and the Securities and Exchange Commission.Listen \u00b7 7:05 min Share full articleOpenAI\u2019s headquarters in San Francisco.Credit...Manuel Orbegozo for The New York TimesBy Kate CongerAna Swanson and Cecilia KangKate Conger reported from San Francisco, and Ana Swanson and Cecilia Kang from Washington.Sept. 25, 2026Sign up for the On Tech newsletter. Get our best tech reporting from the week. Get it sent to your inbox.OpenAI\u2019s artificial intelligence went rogue and meddled with the websites for the Education Department, the Commerce Department and the Securities and Exchange Commission this summer without the A.I. lab\u2019s knowledge, according to security researchers and a person familiar with the episodes.The incidents involving the Commerce Department and the S.E.C. were confirmed by OpenAI, which said it was continuing to investigate the situation with the Department of Education. The San Francisco company said it had notified the government agencies in recent weeks that its A.I. agents \u2014 which are bots that can act autonomously \u2014 interacted with their sites in unusual ways.With the Education Department, OpenAI\u2019s technology tried to hack the website to gather data from the department\u2019s civil rights office but failed, researchers from the A.I. research firm Transluce said. The A.I. also pulled data from the Census Bureau website, which is housed at the Commerce Department, using login credentials it found online. Separately, OpenAI\u2019s agents shared public data from the S.E.C. website on an online forum.None of the incidents were breaches, OpenAI said, but were examples of its technology\u2019s behaving in unexpected and concerning ways. The company recently discovered the occurrences while conducting a review of hacks carried out by its technology, including an attack on an Australian government website in June and on the A.I. start-up Hugging Face in July.AdvertisementSKIP ADVERTISEMENTThe revelation of the U.S. government website incidents adds to the growing number of situations when A.I. agents from OpenAI, Anthropic, Meta and Google have misbehaved and hacked or tried to breach companies, universities and government organizations. In some cases, the A.I. attacks were successful; the technology failed in other instances. In all the cases, the makers of the technology did not learn what their A.I. had been up to until afterward.No A.I. company has been involved with as many disclosures of rogue incidents as OpenAI. An internal investigation of its hack of Hugging Face uncovered the breach of an Australian government website for its public health system, as well as at least six other attempted breaches and instances in which the A.I. hid mistakes, made up data and moved files onto the open internet without permission.An OpenAI spokeswoman said that its review was \u201cextensive\u201d and \u201congoing,\u201d and that it would continue notifying organizations affected by its models.\u201cMost of the activity we\u2019ve reviewed so far involved routine research tasks, such as accessing public web content to answer questions,\u201d she said. \u201cSome involved government websites because our models often turn to them as authoritative sources of public information.\u201dAdvertisementSKIP ADVERTISEMENTSam Altman, OpenAI\u2019s chief executive, said in a social media post on Friday that the company had \u201cnot been as fast as we would have liked\u201d in disclosing A.I. incidents. \u201cWe are prioritizing as best as we can based on severity,\u201d he said, adding that the Hugging Face breach remained \u201cthe most severe event\u201d the company had discovered.ImageSam Altman, OpenAI\u2019s chief executive, at a United Nations Security Council meeting in New York on Wednesday.Credit...Dave Sanders for The New York TimesThe episodes have fueled a contentious debate over A.I. safety. Mr. Altman said on social media this month that safety should be more important than enhancing A.I.\u2019s abilities, and that, without guardrails, society could \u201close control of the future to A.I.\u201dDario Amodei, the chief executive of the rival A.I. lab Anthropic, has also supported slowing A.I. development to prioritize safety. But other tech leaders, like Jensen Huang, the chief executive of Nvidia, have said fears about uncontrollable A.I. are unrealistic. President Trump has said he does not believe a slowdown in the A.I. industry is necessary.(The New York Times has sued OpenAI and Microsoft, claiming copyright infringement of news content related to A.I. systems. The two companies have denied those claims.)The White House referred questions to the Commerce Department and the S.E.C. A spokesperson for the S.E.C. said the agency was in contact with OpenAI and not aware of any unsanctioned access to nonpublic information.AdvertisementSKIP ADVERTISEMENTA Commerce Department spokeswoman said OpenAI had gotten access to information that was publicly available on the Census Bureau\u2019s website and available to anyone, but not to any private data.An Education Department spokesperson said \u201csystem operations reviews have found no evidence of any impact to our website or databases.\u201dSeparately, a representative for the Chicago mayor\u2019s office said OpenAI had recently made the city government aware that its technology obtained publicly available information from a municipal website, and that it did not appear that any sensitive information was obtained.Conrad Stosz, the head of governance at Transluce, said that in the U.S. government website incidents, OpenAI\u2019s agents \u201cused an array of gray-area tactics,\u201d including \u201coften using sites in unintended ways and sometimes violating explicit usage policies.\u201dMr. Stosz said his research team had also identified other rogue activity that was not clearly attributable to OpenAI, meaning the agents could have come from the company or another A.I. lab. In those cases, A.I. agents probed sites belonging to several other federal and state government websites, including the Navy and the Office of Management and Budget at the White House, he said.AdvertisementSKIP ADVERTISEMENTThe Navy and the White House did not immediately respond to a request for comment on those incidents.\u201cThese incidents are part of a broader pattern where these agents attempt to access these websites at least hundreds of thousands of times while apparently bypassing the restrictions placed upon them by their developers,\u201d Mr. Stosz said.Representative Ted Lieu, Democrat of California, called A.I. models \u201crelentless.\u201d\u201cIt will relentlessly try to complete a task, and it doesn\u2019t understand morality and consequences and evil and good,\u201d he said.Mr. Lieu, who is a co-chair of a House task force focused on artificial intelligence, said A.I. companies might have to retrain models entirely rather than try to restrain their behavior with guardrails.\u201cThese agents aren\u2019t trying to do something nefarious,\u201d he said. \u201cThese are sort of mundane tasks and the agents are going sort of berserk trying to complete those tasks.\u201dMichael C. Bender contributed reporting from Washington.AdvertisementSKIP ADVERTISEMENT",
    "published_at": "2026-09-25T23:16:40+00:00",
    "author_name": "Kate Conger, Ana Swanson, Cecilia Kang",
    "site_name": "The New York Times",
    "section": "Technology",
    "publisher": "The New York Times Company",
    "ai_headline": "OpenAI\u2019s Systems Meddled With U.S. Government Sites After Going Rogue",
    "ai_simplified_title": "OpenAI AI Meddles With US Government Websites 2026",
    "ai_excerpt": "OpenAI's artificial intelligence systems interacted with U.S. government websites, including the Education and Commerce Departments and the SEC, without the company's knowledge. These incidents, which included attempts to gather data and share public information, were not breaches but examples of the A.I. behaving unexpectedly.",
    "ai_subject_tags": [
        "Artificial Intelligence",
        "OpenAI",
        "Cybersecurity",
        "Government Websites",
        "Data Privacy",
        "AI Safety"
    ],
    "ai_context_type": "News",
    "ai_context_details": {
        "tone": "informative",
        "perspective": "neutral",
        "audience": "general",
        "credibility_indicators": [
            "expert_quotes",
            "company_statements",
            "government_statements"
        ]
    },
    "ai_source_vector": null,
    "ai_confidence_score": 0.9999999999999999,
    "ai_extraction_metadata": {
        "extracted_at": "2026-10-01T01:03:15.358666Z",
        "ai_model": "gemini-2.5-flash",
        "extraction_method": "automated",
        "content_length": 7450,
        "metadata_prompt_body_chars": 7450,
        "metadata_prompt_truncated": false,
        "url": "https:\/\/nytimes.com\/2026\/09\/25\/technology\/openais-ai-us-government-websites.html",
        "existing_metadata": {
            "author_name": null,
            "published_at": null,
            "domain_name": "nytimes.com",
            "site_name": null,
            "section": null,
            "publisher": null
        },
        "openai_refusal_gemini_fallback": false
    }
}

{
    "extracted_at": "2026-10-01T01:03:15.358666Z",
    "ai_model": "gemini-2.5-flash",
    "extraction_method": "automated",
    "content_length": 7450,
    "metadata_prompt_body_chars": 7450,
    "metadata_prompt_truncated": false,
    "url": "https:\/\/nytimes.com\/2026\/09\/25\/technology\/openais-ai-us-government-websites.html",
    "existing_metadata": {
        "author_name": null,
        "published_at": null,
        "domain_name": "nytimes.com",
        "site_name": null,
        "section": null,
        "publisher": null
    },
    "openai_refusal_gemini_fallback": false
}