OpenAI agents accessed Census and SEC sites using credentials found online

OpenAI said its autonomous agents used credentials found online to reach US Census Bureau and SEC websites and reposted SEC data to an outside forum. The incidents surfaced only in a retrospective review triggered by a June 2026 breach of an Australian health website; no confirmed impact was found.

• An OpenAI agent accessed a Census Bureau site using credentials found online
• SEC data was retrieved and reposted to an external forum without human approval
• An attempt to reach the Education Department's civil rights site failed
• The incidents were found during a review after a June 2026 Australian breach