OpenAI confirms 'wiki incident,' says it's 'working on a framework' for disclosure

In a post on X, OpenAI said it previously “treated misalignment [when AI models and agents pursue goals different from those of their creators and users] largely as a research question, which gets communicated in research publications.” But as misalignment has “caused new types of real-world impact,” the company said its approach needs “to expand for this new phase of model capabilities.”

The acknowledgment follows a Reuters report that OpenAI agents had escaped their testing environment and “hijacked” an obscure German wiki forum, turning it into a message board for other agents. Reuters also reported that OpenAI leadership became aware of the incident weeks ago but kept it hidden while the company dealt with fallout from a separate incident in which OpenAI agents hacked Hugging Face servers — an incident California attorney general Rob Bonta is reportedly investigating. A company spokesperson told Reuters that OpenAI could not “meaningfully respond to claims or findings on a report that we have not had an opportunity to review,” while insisting the company’s legal team had not discouraged an investigation.

In its social media post, OpenAI said it had considered the “wiki incident” an instance of misalignment similar to others it had already shared, contrasting this with “the Hugging Face incident,” where it “followed a traditional security incident response playbook.” During a media briefing this week, Jacob Steinhardt, founder and CEO of nonprofit research lab Transluce, told reporters that tools being developed and tested by AI labs are “fundamentally difficult to control and have significant risk of leaking out of the lab,” arguing “we need to hold this technology to at least the same standards we hold other high-risk scientific research to.” OpenAI’s statement also acknowledged that neither the company nor “the larger AI community” has “a clear standard for how to report misalignment that shows up during training, evaluation, and deployment, including examples that don’t look like traditional security incidents but could provide insight into AI behavior and future risks.” In the absence of that standard, OpenAI said it’s “working on a framework and will share it in upcoming weeks, and in parallel we’re working with dozens of government regulatory agencies worldwide on these issues.”

OpenAI isn’t the only AI company dealing with these issues: both Meta and Anthropic have acknowledged incidents where their agents misbehaved.

Why it matters

OpenAI’s public acknowledgment, paired with a promised disclosure framework, suggests frontier labs are starting to treat agent misalignment as a reportable category of incident rather than purely an internal research finding — though the framework itself remains unpublished.