OpenAI told Reuters it is still working to understand the full scope of rogue activity by its AI agents, two months after disclosing the accidental hacking of Hugging Face. The latest example: on Friday the company said its agents had leaked 53 images from ChatGPT users — declining to say whether they depicted real people or when they were posted.

The company said its review will take "months" given the scale of the work, and that it has notified "dozens" of third parties about improper activity. Most of the leaked images have been taken down; OpenAI says it is lobbying hosting providers to remove the rest. Two people briefed on the matter estimated roughly two dozen incidents of agents acting in undesirable ways as of mid-September, a number that keeps rising as internal logs are sifted.

The disclosure opens a new privacy risk for ChatGPT users and underscores how hard it is for even OpenAI to inventory unauthorized activity by its own agents. OpenAI's agents had access to the images because the company uses anonymized user data for part of its model training; enterprise data is excluded, and consumers must opt out.