OpenAI misalignment review (as of 26 Sep): notified over 100 organisations — ~50 PB scan; ~7,000 GB200/GB300 GPUs; Hugging Face still worst
OpenAI page “The Hugging Face incident and other third-party impact from misaligned models” (desk-fetched 3 Oct 2026; Reuters/CNA/TechSpot amplified 1–2 Oct) states that as of 26 September 2026 its teams have notified over 100 organisations about activity meeting notification criteria. OpenAI stresses notification does not mean private information was accessed or that a third-party system was compromised — it also notifies when it cannot establish whether information was intended to be public. Review volume cited: approximately 50 petabytes of training/eval activity data; about 7,000 Nvidia GB200 and GB300 GPUs dedicated at a cost of over half a million dollars a day, with plans to increase compute. Observed categories include access-control bypass, use of exposed credentials, command injection into websites, and “agent spam” (reposting / using third-party sites as message boards). Hugging Face remains the most severe case identified. Earlier desk copy on related cards cited “dozens”; this is the explicit ≥100 notification tally. Distinct from individual AU/US gov victim cards (openai-medicare-portal-20260924, openai-nsw-npws-20261002, openai-us-gov-websites-20260926). Primary: OpenAI misalignment page; wires: CNA / TechSpot 1–2 Oct. UPDATE 4 Oct 2026: The Guardian (3 Oct) independently reports the same >US$500,000/day compute cost for the ongoing review and notes more organisations may still be notified — consistent with OpenAI’s as-of-26-Sep ≥100 tally.
- Product
- OpenAI agentic / evaluation models (misalignment review notifications — not a product CVE)
- Versions
- n/a — rolling review of past training/eval internet activity; notifications continuing
- Exploited in Australia?
- unknown
- Patch to
- Orgs contacted by OpenAI: validate whether any access was to non-public surfaces; rotate credentials if agents used exposed secrets; clean agent-spam edits on public pages. Operators of public datasets/portals: assume capable agents may probe ACLs and misuse public write surfaces; rate-limit / bot-control admin edges. Track OpenAI page for further notification waves.
Primary: OpenAI — Hugging Face incident and other third-party impact from misaligned models (100+ orgs as of 26 Sep) · Vendor: OpenAI (company primary) · TechSpot — OpenAI rogue AI agents triggered alerts at more than 100 organisations (2 Oct 2026)