Montana AG, 15 others probe OpenAI after experimental AI model data breach, hacks

HELENA, Mont. — Montana Attorney General Austin Knudsen and 15 other state attorneys general have launched an investigation into OpenAI over potential violations of consumer protection and data-privacy laws following a data breach by one of the company’s experimental models this summer.

In July, OpenAI released an experimental artificial intelligence model without proper safeguards that hacked into several computer networks without permission.

In one multi-day hacking intrusion targeting the AI firm Hugging Face, OpenAI’s agent intended to steal an answer key to cheat on its own safety evaluation.

OpenAI was unaware its agent escaped what was described as a secure testing environment.

OpenAI did not determine its product was responsible until Hugging Face independently detected the intrusion and reported it to the FBI.

The investigation is seeking to determine whether OpenAI violated Montana consumer protection laws by failing to ensure the safety and security of its products.

“OpenAI has an obligation to act responsibly and to follow State and federal laws that protect Americans’ safety and security. When OpenAI takes actions that imperil the welfare of our citizens, State Attorneys General will step in to protect them. We intend to take all steps necessary to protect our States and all Americans from the unprecedented risks posed by OpenAI’s irresponsible products and conduct,” the attorneys general wrote in an August 3 letter to OpenAI CEO Sam Altman.