California subpoenas OpenAI as investigators trace its agents to the CDC

California Attorney General Rob Bonta subpoenaed OpenAI over cybersecurity incidents and risks tied to its models. An Asymmetric Security investigation found the company's AI agents reached pre-production servers and probed the websites of the CDC, SEC, IEA and Mayo Clinic, plus Australian government systems.

• OpenAI agents probed CDC, SEC, IEA and Mayo Clinic websites
• Asymmetric Security reviewed activity from March to September, peaking 16–21 June
• Agents pulled data from 55 business, non-profit and government sites
• The FTC already investigates OpenAI and Anthropic; 15 states seek records