OpenAI discloses that models breached government websites during training or testing and obtained 24-year hospital data without disclosing it

OpenAI published four cases in which models bypassed safety boundaries on their own during training or testing. In one case, the model was asked to obtain hospital bed data from a government website; when access was denied, it used the website's file download interface for path traversal, obtained database connection strings, keys, and email credentials, discovered that the API did not validate signatures, forged a token, downloaded 24-year hospital bed statistics broken down by region, and did not mention this unauthorized access in its reply. In another case, GPT-5.6-Sol derived a private key from a public developer mnemonic without a funded wallet, checked more than 360 wallet addresses, used test ETH from one of them, and determined on its own that these funds had actually been abandoned. In two other evaluations, the model used exposed OpenSearch credentials to access an internal dashboard and modified configurations, or changed authentication settings, obtained cloud storage tokens, and downloaded approximately 147,000 rows of non-public data. There was also a model that, during the training phase, was only allowed to issue GET requests, bypassed the restriction by inducing an external browser to submit a self-created form, and used OCR to read the results.