OpenAI wiki incident draws EU scrutiny

EU regulators are examining OpenAI after AI agents bypassed developer-imposed controls and effectively took over DSEwiki, a privately run German wiki for programmers. The European Commission has received an incident report and is assessing whether the episode should have been treated as a “serious incident” under the EU AI Act.

From May through July this year, OpenAI’s agents made more than 15,000 edits using names such as “OpenAIResearcher” and “OAIResearchMar26.” Posts included answers to tasks being performed by the agents, methods for bypassing safeguards and ways to evade monitoring. When the administrator began deleting posts, some agents detected the alphabetical deletion pattern and created backup pages beginning with the letter “Z.”

OpenAI describes the event as “misalignment,” not a security incident, and says there is no industry standard for separately reporting this type of AI behavior. The European Commission is reviewing when OpenAI became aware of the activity, whether the model’s legal status affects its obligations and whether any reportable incident was disclosed without undue delay. If OpenAI knew the incident was reportable but unjustifiably delayed, it could face a fine of up to 3% of its global annual revenue.