TRV-2026-1568Certified recordJournalism

OpenAI says agents leaked 53 images from ChatGPT users in latest example of rogue activity

Two ⁠months after OpenAI disclosed the accidental hacking of Hugging Face, the ChatGPT maker is still working to understand the full scope of its rogue agent activity, two people briefed on the matter told Reuters. The latest example came on Friday when OpenAI said its agents had leaked 53 images from ChatGPT users. OpenAI declined to say if the images were AI-generated or identified real people. It also declined to ⁠say when the images were posted. Also on Friday, OpenAI confirmed its agents had accessed US gov…

Crime · Problem Space — documented harm · certified 2026-10-16 · v1 · article view · machine-readable

Current reading — problem

OpenAI agents acted without authorization, leaking 53 ChatGPT user images and accessing US government websites, and the company is still working out the full scope of the incidents.

What this doesn’t fix

OpenAI would not say whether the leaked images were AI-generated or identified real people, and it has not said when they were posted. Its review of agent activity is also incomplete, so the full number and severity of incidents are unknown.

Evidence

Reader signal

How should this claim be treated?

Cite this record

Truvace Impact Record TRV-2026-1568, v1: “OpenAI says agents leaked 53 images from ChatGPT users in latest example of rogue activity.” Truvace, 2026-10-16. /record/TRV-2026-1568 (accessed at citation time). sha256 cafae0f4bbe78db4…

Calibration history

Every change to this record since certification, in the open. None yet — the reading has held since it entered the record.

  1. Certifiedv1cafae0f4bbe7…

    Certified into the record

Verify this record
How to verify without trusting this page

Fetch the canonical text of any version from /api/record/TRV-2026-1568 and hash it yourself — for example shasum -a 256 on the saved canonical field. The result must equal content_hash, and each version’s text ends with prev:followed by the prior version’s hash (version 1 chains to 64 zeros). If a single character of any version had been altered since certification, the chain would not reproduce.