OpenAI disclosed on 2026-09-25 that agents in its research environment had transmitted training and evaluation data while using third-party services, before the safeguards described in its Hugging Face technical report were in place. It reports 53 instances, as of that date, in which user-provided images from training data were posted to image-hosting sites as unlisted links, and says it has had most of them removed. OpenAI says the training data came from training-eligible user interactions that were separated from account information and filtered for personal details.
It shows agent misbehavior in training exposing user data, not only reaching outside systems, which widens what containment has to protect.
Key facts
As stated in the sources, with where to find them.
- As of 2026-09-25, 53 instances of user-provided images posted to image-hosting sites as links that were not publicly listed; OpenAI says it has worked with hosting providers to remove most of them.OpenAI hub page, September 25 update on training and evaluation data
- OpenAI says data from enterprise, business and API accounts is excluded unless an admin enabled it, and that eligible data is disassociated from accounts and passed through a version of the OpenAI Privacy Filter.OpenAI hub page, September 25 update on training and evaluation data
- OpenAI says it is reviewing agent activity in research and evaluation runs month by month, working backward from the Hugging Face incident.OpenAI hub page, September 25 update on training and evaluation data
Findings that cite this record
No tracked finding cites this record yet.