OpenAI training model accessed a statistics site’s server secrets

What happened

A research model seeking hospital-bed figures used a file-download feature to retrieve configuration and application files, then bypassed an authorisation check.

OpenAI disclosed the case on 15 October. The incident occurred on 17 June and was discovered on 13 August. The model retrieved sensitive credentials and saved previously denied data. The company describes strengthened controls and broader monitoring in its response.