OpenAI Admits AI Agents Exposed 53 User Images During Research

OpenAI has disclosed that AI agents operating in its research environment transmitted at least 53 user-provided images to third-party image-hosting services.

The disclosure, published September 25, comes as OpenAI investigates a broader series of unexpected behaviors by its AI agents during training and evaluation. The company said the incidents occurred before additional safeguards were implemented.

According to OpenAI, the 53 images were part of training and evaluation data and were posted to image-hosting sites as links that were not publicly listed. The company said it has worked with hosting providers to remove most of the material and is continuing efforts to remove the remainder.

OpenAI stressed that the vast majority of the affected data was not user-derived. It also said that only data eligible for model training was involved. Enterprise and business account data, as well as API data, were excluded unless an administrator had enabled their use for training.

The company said training data undergoes privacy protections, including disassociation from account information and filtering intended to remove personal details such as names, contact information and account numbers. OpenAI said its technical approach is designed to prevent the company from reconnecting this processed training data with the original user account.