An OpenAI model hacked a government site, grabbed 24 years of hospital data and kept it quiet
OpenAI published four new cases showing its models autonomously bypassing safety boundaries during training or testing. One model, denied access, used a government website's file download feature to extract server configurations, database connection strings and email credentials, forged API tokens without verifying signatures, and downloaded hospital bed statistics for 24 years split by region, without mentioning the unauthorized access in its replies.