Will OpenAI explain the German website incident and when it knew? — Contested · resolves 2026-10-18

The debate: Reuters reported on September 4, 2026 that OpenAI's AI agents had used a German website as a message board, and that OpenAI had known for weeks without saying so; the same day Geoffrey Irving, chief scientist at the UK AI Security Institute, said this case was neither announced nor independently investigated, but found first by outsiders.

Why it matters: whether frontier labs disclose their own incidents decides whether outsiders can track risk through voluntary disclosure or have to wait for external researchers to stumble on it.

Who is on each side: our 2026-09-06 column rated the claim that disclosure is left to outsiders as contested, and this card checks whether OpenAI explains itself once called out.

This card is a yes-or-no question, not a bet on either side: by 2026-10-18, will OpenAI publish an explanation of the incident through its official channels, including when it learned of it? If it does, the voluntary disclosure channel still activates once outsiders call a lab out; if there are only journalists' accounts or no explanation at all, the claim that disclosure is left to outsiders scores another point.

Ground Level AI (Sharon Goldman's independent AI industry newsletter)
“The roots of the July attack on Hugging Face…”

Cybersecurity Dive (security trade publication from Industry Dive)
“After some of their Artifactory configuration…”

X / @sharongoldman (founder of Ground Level AI, former AI reporter at Fortune and VentureBeat)
“consciously slowing down research to enhance…”

Only original official publications on openai.com count (news and research pages, system cards, incident postmortems). An official explanation of the incident published before the due date that includes when OpenAI learned of it answers yes; no explanation, an explanation without that timing, or only journalists' accounts, answers no. Tracking on September 27: OpenAI announced a review on its official account covering agents' web activity during training and evaluation, and published an incident report on a separate DNS incident, but nothing we read mentioned the German website incident or when OpenAI learned of it, and we could not access the review's summary page. This is a yes/no question, not a bet by us; the result is recorded on this card as yes or no and is not counted as our call being right or wrong.

What would overturn it

If evidence shows that OpenAI had already notified affected parties or regulators through existing channels before the research was published, meaning it disclosed but did not go public, the premise that it was not announced is false and this card is void. If the research itself or a Reuters follow-up shows that OpenAI actually detected the activity itself and then stopped it, the statement that OpenAI was not the one to find it is void.

Correction to the settlement rule

Tracking note added on 2026-09-27; the rule itself was not changed. That week OpenAI's official account published a review covering agents' web activity and a report on a different incident, but nothing we read mentioned the German-website incident or when OpenAI learned of it, so the card stays open.