OpenAI’s artificial intelligence went rogue and meddled with the websites for the Education Department, the Commerce Department and the Securities and Exchange Commission this summer without the A.I. lab’s knowledge, according to security researchers and a person familiar with the episodes.

The incidents involving the Commerce Department and the S.E.C. were confirmed by OpenAI, which said it was continuing to investigate the situation with the Department of Education. The San Francisco company said it notified the government agencies in recent weeks that its A.I. agents — which are bots that can act autonomously — had interacted with their sites in unusual ways.

With the Education Department, OpenAI’s technology tried hacking the website to gather data from the department’s civil rights office, researchers from the A.I. research firm Transluce said. The A.I. also pulled data from the Census Bureau website, which is housed at the Commerce Department, using login credentials it found online. Separately, OpenAI’s agents shared public data from the S.E.C. website on an online forum.

None of the incidents were breaches, OpenAI said, but were examples of its technology behaving in unexpected and concerning ways. The company recently discovered the occurrences while conducting a review of hacks carried out by its technology, including an attack on an Australian government website in June and on the A.I. start-up Hugging Face in July.

The revelation of the U.S. government website incidents add to the growing number of situations where A.I. agents from OpenAI, Anthropic, Meta and Google have misbehaved and hacked or tried to breach companies, universities and government organizations. In some cases, the A.I. attacks were successful; the technology failed in other instances. In all the cases, the makers of the technology did not learn what their A.I. had been up to until afterward.

No A.I. company has been involved with as many disclosures of rogue incidents as OpenAI. Its hack of Hugging Face sparked an internal investigation, which uncovered the breach of an Australian government website for its public health system, as well as at least six other attempted breaches and instances in which the A.I. hid mistakes, made up data and moved files onto the open internet without permission.

An OpenAI spokeswoman said its review was “extensive” and “ongoing,” and that it would continue notifying organizations affected by its models.

“Most of the activity we’ve reviewed so far involved routine research tasks, such as accessing public web content to answer questions,” she said. “Some involved government websites because our models often turn to them as authoritative sources of public information.”

Editors’ Picks

For Sale: A Midcentury Gem Restored by Benedikt Taschen

Adding a Child to Your Car Insurance? Here Are Ways to Hold Down the Costs.

Mark Zuckerberg Is Trying Something On

Sam Altman, OpenAI’s chief executive, said in a social media post on Friday that the company had “not been as fast as we would have liked” in disclosing A.I. incidents. “We are prioritizing as best as we can based on severity,” he said, adding that the Hugging Face breach remained “the most severe event” the company had discovered.

The episodes have fueled a contentious debate over A.I. safety. Mr. Altman said on social media this month that safety should be more important than enhancing A.I.’s abilities, and that, without guardrails, society could “lose control of the future to A.I.”

How Three Times Tech Journalists Make Sense of A.I.’s Promise and Peril
Artificial intelligence is advancing so fast that tech leaders say better safety controls are needed. Here’s how our reporters keep up.
Sept. 24, 2026
Dario Amodei, the chief executive of rival A.I. lab Anthropic, has also supported slowing A.I. development to prioritize safety. But other tech leaders like Jensen Huang, the chief executive of Nvidia, have said that fears about uncontrollable A.I. are unrealistic. President Trump has said he does not believe a slowdown in the A.I. industry is necessary.

(The New York Times has sued OpenAI and Microsoft, claiming copyright infringement of news content related to A.I. systems. The two companies have denied those claims.)

The White House referred questions to the Commerce Department and the S.E.C. A spokesperson for the S.E.C. said the agency was in contact with OpenAI and was not aware of any unsanctioned access to nonpublic information. The Commerce Department and the Department of Education did not respond to requests for comment.

Separately, a representative for the Chicago mayor’s office said that OpenAI recently made the city government aware that its technology had obtained publicly available information from a municipal website, and that it did not appear that any sensitive information was obtained.

Conrad Stosz, the head of governance at Transluce, said that in the U.S. government website incidents, OpenAI’s agents “used an array of gray-area tactics,” including “often using sites in unintended ways and sometimes violating explicit usage policies.” He added, “This is part of a pattern of thousands of requests of these agents made to these websites as they were apparently bypassing restrictions placed on them by their developers.”

Representative Ted Lieu, Democratic of California, said A.I. models were “relentless. It will relentlessly try to complete a task and it doesn’t understand morality and consequences and evil and good.”

Mr. Lieu, who is the co-chair of a House task force focused on artificial intelligence, said A.I. companies may have to retrain models entirely rather than try to restrain their behavior with guardrails.

“These agents aren’t trying to do something nefarious,” he said. “These are sort of mundane tasks and the agents are going sort of berserk trying to complete those tasks.”