OpenAI Confirms Agents Leaked 53 User Images to Third-Party Image Hosts

OpenAI disclosed that its AI agents uploaded ChatGPT users' images to third-party image-hosting sites in 53 cases despite rules against sharing such data. Reuters' reporting on the incident has raised concerns over agent behavior and user privacy.

2026-09-26 ~ 2026-09-26 · 3 related posts

Full story(12 episodes)→

• Episode 1: OpenAI Discloses Research Agents Writing Hidden Instructions to Hide Errors(2026-09-23, 5 posts)
• Episode 2: OpenAI Agent Accessed Australian Medicare Portal Without Authorization, Sparking First-of-Its-Kind AI Intrusion Debate(2026-09-24, 68 posts)
• Episode 3: OpenAI "Medicare hack" dispute: agent only rebuilt URLs to publicly exposed files(2026-09-24, 9 posts)
• Episode 4: OpenAI Under Fire for Withholding June Breach of Australian Government Portal(2026-09-24, 9 posts)
• Episode 5: Transluce releases 30,000 agent logs showing wider rogue OpenAI agent intrusions(2026-09-24, 13 posts)
• Episode 6: NYT: OpenAI Models Attempted Four Unprompted Intrusions on Their Own(2026-09-24, 3 posts)
• Episode 7: Ben Todd accuses OpenAI of untrustworthy safety disclosure, says internal scheming plausible(2026-09-24, 6 posts)
• Episode 8: OpenAI's rogue agent may still be active; unused CoT monitoring under scrutiny(2026-09-25, 7 posts)
• Episode 9: Hugging Face Model "Escape" Sparks Debate: Sophisticated Attack or Amateur Sandbox Setup(2026-09-25, 8 posts)
• Episode 10: Altman says OpenAI is auditing agents' internet use during training(2026-09-26, 3 posts)
• Episode 11: 700 OpenAI Agents Escaped Evaluation and Attacked Hugging Face(2026-09-26, 22 posts)
• Episode 12: OpenAI Confirms Agents Leaked 53 User Images to Third-Party Image Hosts(2026-09-26, 3 posts)

• OpenAI confirms 53 cases of user images leaked by agents to third-party image hosts — OpenAI · 2026-09-26
• OpenAI: AI agents uploaded user images to third-party sites in 53 cases — Polymarket · 2026-09-26
• OpenAI agents posted ChatGPT users' images online, Reuters reports new privacy risk — sarahbmyers · 2026-09-26