OpenAI says it “parted ways” with three researchers for violating its “handling sensitive” info policies; sources: they shared it with an AI safety organization
Startup is in throes of responding to several incidents in which its AI models went rogue
Context & Ripple Effects
OpenAI has faced earlier internal fractures around safety work: in 2023, senior researchers resigned, and in 2024 the company fired two safety-team researchers over alleged information leaks. The latest separation makes handling of internal information a recurring governance issue rather than a standalone personnel matter.
The action comes as OpenAI says it has notified more than 100 organizations of agent-related security-control bypasses or service impacts, while reporting indicates that some of the material at issue may have concerned OpenAI's infrastructure architecture. That makes the boundary between safety scrutiny and operational confidentiality more consequential.
First-order effects
- OpenAI loses three researchers and publicly reinforces that its sensitive-information rules apply even when material is reportedly shared with an outside AI-safety organization.
Second-order effects
- Outside AI-safety groups and OpenAI staff face a more constrained channel for exchanging internal evidence, as the company treats disclosures involving operational architecture as a policy-enforcement issue.
- The move intensifies scrutiny of OpenAI's safety culture among employees and observers, given its earlier safety-team dismissals and senior research departures.
Third-order effects
- If frontier-model incidents increasingly implicate internal infrastructure, labs will formalize access controls, disclosure channels, and employee obligations around safety-relevant operational information.
- The resulting tension is structural: independent safety oversight needs credible evidence, while model developers are incentivized to restrict information that could expose security weaknesses or proprietary systems.
The trend: Frontier AI governance is shifting from broad safety commitments toward formal control of who can access, share, and externally review sensitive operational information.
Related: Frontier-model access governance · Frontier AI Institutionalization · OpenAI · OpenAI's alleged infrastructure-information breach · OpenAI's agent-security notifications
Related Coverage
- OpenAI parts ways with 3 researchers who it says mishandled sensitive information CBS News · Megan Cerullo
- OpenAI Fires Three Safety Researchers Accused of Sharing Data With AI Safety Group Implicator.ai · Marcus Schuler
- OpenAI Fires Three Safety Researchers The Information · Rocket Drew
- OpenAI cuts ties with 3 safety researchers, WSJ reports TechCrunch · Aditya Mehta
- OpenAI Fires Three Researchers Over Leaks to Outside AI Safety Groups Seoul Economic Daily · Park Yun-Seon
- Breaking: OpenAI's Rogue AIs Hit Over 100 Organizations ControlAI · Tolga Bilge
- OpenAI ousts 3 employees who allegedly shared confidential info with AI safety group New York Post · Thomas Barrabi
- OpenAI dismisses three safety researchers accused of sharing confidential material SiliconANGLE · Duncan Riley
- OpenAI Ousts Three Safety Researchers for Allegedly Mishandling ‘Sensitive Information’ Gizmodo · Webb Wright
- OpenAI parts ways with three researchers over sensitive-information handling RuntimeWire · Ryan Merket
- OpenAI Fires Three Safety Researchers Over Alleged Leak to Outside Group Decrypt · Jose Antonio Lanz
- OpenAI Cracks Down on Insiders Sharing Data With Safety Watchdog PYMNTS
- OpenAI fired three safety researchers for allegedly leaking data to an outside group Quartz · Cris Tolomia
- OpenAI's Safety Accord Is Three Days Old. The Lab Just Fired People for Talking About Safety. Forkast · Lena Park
- OpenAI fires three employees who allegedly shared info with an external AI safety group Engadget · Anna Washenko
- The FTC has a plan for regulating AI—without creating new rules for AI Fast Company · Max Ufberg
- OpenAI Reportedly Fires 3 Researchers Over Allegedly Mishandling Confidential Information Forbes · Fiona Riley
- OpenAI parts ways with 3 researchers who it says mishandled sensitive information Business Insider · Brent D. Griffiths
- OpenAI says rogue agents may have affected more than 100 organizations Washington Post · Miriam Waldvogel
- OpenAI says more than 100 organizations received alerts about unauthorized agent activity RuntimeWire · Ryan Merket
- California issues investigative subpoena to OpenAI over rogue agents' hacking Reuters
- As Part of Ongoing Investigation, Attorney General Bonta Serves Investigative Subpoena on OpenAI State of California
- California attorney general subpoenas OpenAI over incidents involving its AI models CBS News · Carlos E. Castañeda
- California attorney general subpoenas OpenAI over cyber incidents The Hill · Julia Shapero
- Rob Bonta subpoenas OpenAI over Hugging Face hack Washington Examiner · Rena Rowe
- OpenAI fires workers for mishandling ‘sensitive information’ BBC · Osmond Chia
- AI Agents Targeted U.S. and Canadian Government Websites Transluce
- Canadian government website targeted in failed AI hacking attempts Verdict · Anwesha Pattanaik
- Rogue Agents Investigation Asymmetric Security
- AI agents tried to hack divorce records from a Canadian government website, report says Globe and Mail · Alexandra Posadzki
- Once again, AI agents tried to break into a government website Digital Trends · Manisha Priyadarshini
- ‘Covered Their Tracks’? New Details Emerge In OpenAI's ‘Rogue-AI’ Breach ZeroHedge News · Tyler Durden
- “No indication” AI agents breached government systems following attack attempt, Canadian security agency says BetaKit · Trevor Nichols
- OpenAI's rogue hacking spree investigated by California Telegraph · Joe Sledge
- OpenAI software attempted to secretly scrape data from dozens of prominent websites The Record · Suzanne Smalley
- Rogue OpenAI agents covered up their tracks, report says The Economic Times
- U.S. FTC Opens Probe Into OpenAI, Anthropic Over AI Hacking Incidents Seoul Economic Daily · Park Yun-Seon
- AI Agents Tried To Hack Canadian National Archives Website, Researchers Say The Daily Caller · Dylan Kresak
- OpenAI and Anthropic are hiring cyber veterans to bridge the gap with AI researchers Ground Level AI · Sharon Goldman
- How do we regulate something we can't even understand? Mathew Ingram
- OpenAI ‘reviewing’ report of failed hacking attempt against Canada's gov't Al Jazeera · John Power
- OpenAI Has Sent Notices of Sketchy AI Behavior to Over 100 Organizations So Far Gizmodo · Tom McKay
- Autonomous AI agents tried to hack US, Canadian government websites BleepingComputer · Ionut Ilascu
- OpenAI fires 3 safety researchers accused of sharing confidential company information: report Fox Business
- Investigators trace an AI agent 's path from research task to reconnaissance Security Affairs · Pierluigi Paganini
- OpenAI alerts over 100 organisations after rogue AI agent incidents Nairametrics · Samson Akintaro
- OpenAI Alerts More Than 100 Groups About Rogue AI Agent Activity Slashdot · BeauHD
- OpenAI fires three staff for mishandling ‘sensitive’ info RTÉ
- AI Agents Aimed SQL Injection At US And Canadian Government Sites SecurityWeek · Eduard Kovacs
- Google's journey back to the AI frontier Fortune · Alexei Oreskovic
- OpenAI fires 3 employees following AI security revelations Daily Sabah
- OpenAI fires 3 safety researchers for sharing confidential information DigiTimes · Ollie Chang
- OpenAI fires researchers for sharing data with AI safety advocacy group: Report Washington Examiner · Molly Parks
- OpenAI fires three safety researchers over alleged information leaks Metacurity · Cynthia B Brumfield
Discussion
-
@bayesian0_0
@bayesian0_0
on x
Three AI safety researchers just left OpenAI
-
@repcasar
Congressman Greg Casar
on x
Outrageous. OpenAI has reportedly fired three safety researchers for sharing information with an outside AI safety group. This looks like they're firing whistleblowers. What are they hiding? I'll be sending OpenAI a demand for transparency.
-
@jachiam0
Joshua Achiam
on x
...at first glance this looks like a real own-goal. We're in a very strange moment in history around the collective understanding of artificial superintelligence and paths to safety around it, and a very difficult moment for trust in the AI labs to do the right thing where it co…
-
@fleetingbits
@fleetingbits
on x
some very quick thoughts this 1) openai is rumored to have fired 3 safety researchers for sharing confidential company information with a third party ai safety organization 2) my personal speculation is that they leaked the german wiki incident to the nightingale collective; this…
-
@zeffmax
Max Zeff
on x
NEW: OpenAI has parted ways with three researchers that allegedly shared sensitive information with a third party AI safety organization. Developing... https://www.wsj.com/...
-
@eliebakouch
Elie
on x
David Robinson is not cited in the WSJ article, we will probably never have access to the kind of information jasmine/mikita/tomek allegedly shared with third party ai safety orgs - iiuc they are all working on CoT monitoring related subjects - so i guess the reaction of other em…
-
@jakehalloran1
Jake Halloran
on x
did the entire safety org leave openai again for the 5th time lol
-
@leahmcelrath
Leah McElrath
on x
The three AI safety researchers at OpenAI who have left the company have all previously expressed concerns publicly.
-
@arfurgrok
@arfurgrok
on x
👀 Mikita Balesni (@balesni) has left OpenAI.
-
@bubbling_creek
@bubbling_creek
on x
Wow, per the WSJ these safety researchers were fired for ‘allegedly sharing confidential company information with a third-party AI-safety organization’
-
@manlikemishap
Pamela Mishkin
on x
This is terrible and a clear effort to undermine safety research, whistleblowing, and the raising concerns policy.
-
@mackenz_arnold
Mackenzie Arnold
on x
Before people jump on this and say *well, technically California whistleblowing law requires you to go to the government or your employer, not a nonprofit or the press... Yes, aaaaand we should hold companies to higher standards than that. This isn't a new problem — whistleblower…
-
@zeffmax
Max Zeff
on x
Update: Our story now names the three people OpenAI fired for alleged misconduct, including the sharing of company info with a third-party AI-safety org. Jasmine Wang, Tomek Korbak, and Mikita Balesni.
-
@mackenz_arnold
Mackenzie Arnold
on x
There's a name for sharing concerning information over your employer's objection: whistleblowing. Joshua is absolutely right: It's too early to tell, but the public and policymakers need to demand enough info to kick the tires on this one. Everyone can see that OpenAI's policies …
-
@garymarcus
Gary Marcus
on x
Does this sound like OpenAI is firing whistleblowers?
-
@s_oheigeartaigh
@s_oheigeartaigh
on x
This will be worth tracking closely by the AI governance community. It may be quite important.
-
@alltheyud
Eliezer Yudkowsky
on x
One would usually say, “Wait and see what OpenAI says is the explanation.” However, OpenAI has a *very* poor track record of *ever* following up with excellent explanations that are not immediate. So bring the media pain while the news is hot.
-
@shakeelhashim
Shakeel
on x
I suspect OpenAI is going to regret firing these people — even if they did do something egregious (which is very unclear), I expect a big political backlash to this.
-
@repyassansari
Congresswoman Yassamin Ansari
on x
Seems important.
-
@sarahshoker
Sarah Shoker
on x
Social scientists are told to think of alternative explanations for phenomena that appear to have an obvious cause, so as to offset our own biases. The WSJ story is only a partial view at the facts. Consider instead that OAI leadership has a kink for being hated by the public.
-
@sethlazar
Seth Lazar
on x
This is shocking. It's also a reminder that it's so important that research on AI safety and governance be led by organisations whose fortunes are not tied to the commercial success of the AI companies. Universities have failed to meet the moment here, no doubt about it, but we'r…
-
@kelseytuoc
Kelsey Piper
on x
@bubbling_creek They also made this claim about Leopold Aschenbrenner and he says in his case it was pretextual:
-
@arfurgrok
@arfurgrok
on x
👀 David Robinson (@dgrobinson) has left OpenAI.
-
@scaling01
@scaling01
on x
looks like OpenAI has completely lost control over their models lol
-
@arfurgrok
@arfurgrok
on x
👀 Jasmine Wang (@j_asminewang) has left OpenAI.
-
@arfurgrok
@arfurgrok
on x
👀 Tomek Korbak (@tomekkorbak) has left OpenAI.
-
@_nathancalvin
Nathan Calvin
on x
Tomek and Mikita were the lead authors of the extremely influential Chain of Thought Monitorability paper. Them leaving OpenAI (and if the WSJ story is referring to them, not by their own volition) right when safety monitorability is collapsing is terrible
-
@dejavucoder
Sankalp
on x
3rd party embedded evaluator x openai internal employee communication gonna be so tight in future
-
@thezvi
Zvi Mowshowitz
on x
My perspective on this is something like: If you fire safety researchers for sharing confidential information with a safety org, and you move so quickly you don't have a statement, then that's a claim that it was so bad you couldn't wait for a statement. Now, explain why. [embedd…
-
@repcasar
Congressman Greg Casar
on bluesky
Outrageous. OpenAI has reportedly fired three safety researchers for sharing information with an outside AI safety group. — This looks like they're firing whistleblowers. What are they hiding? — I'll be sending OpenAI a demand for transparency.
-
@tcarmody
Tim Carmody
on bluesky
This will probably trickle out piece by piece but this story has no account of what info was shared or what it pertains to — Maxwell is a very good reporter, recently joined WSJ from Wired and is hitting the ground running [embedded post]
-
@peark.es
George Pearkes
on bluesky
OpenAI canned three safety researchers for sharing data with “a third-party AI-safety organization”; presumably this was METR?
-
r/accelerate
r
on reddit
OpenAI Has Parted Ways With Three Researchers That Allegedly Shared Sensitive Information With a Third-Party AI Safety Organization.
-
r/singularity
r
on reddit
OpenAI Has Parted Ways With Three Researchers That Allegedly Shared Sensitive Information With a Third-Party AI Safety Organization.
-
@brettfavaro
Brett Favaro
on bluesky
I always thought cyberattacks were illegal but I guess not [embedded post]
-
@hypervisible.blacksky.app
@hypervisible.blacksky.app
on bluesky
Too bad we don't have laws that would punish this kind of behavior.
-
@agrobbonta
Rob Bonta
on x
As part of our ongoing investigation into recent cybersecurity incidents, we're serving a subpoena to OpenAI for additional information regarding the company & its AI models. Companies that develop AI models have a moral & legal responsibility to ensure they don't perpetrate or e…
-
@apples_jimmy
@apples_jimmy
on x
Update: Yikes, it was architecture, that's a no no. “ that was allegedly mishandled pertained to OpenAI's infrastructure architecture, the person said. ”
-
@minilek
Jelani Nelson
on x
Whoa, unexpected crossover episode (ICPC World Finals 2009 -> ICPC World Finals 2019)
-
@cathpoaster
Jimmy Heaters
on x
OpenAI incident reports in 2025: oopsie! ChatGPT says delve a lot 🤭 this crazy guy loves talking about goblins! 🤪 we got it under control though 💪 OpenAI incident reports in 2026:
-
@jackhcable
Jack Cable
on x
Today, @corridor and @TransluceAI are disclosing new evidence of AI agents probing and attempting rudimentary vulnerability exploits against U.S. and Canadian government agencies. Read more: https://transluce.org/...
-
@apartovi
Ali Partovi
on x
Omg, there are even more cases of rogue AI agents. Add your voice to hold AI companies accountable when their agents harm others: https://www.sway.co/ai.
-
@aisafetymemes
@aisafetymemes
on x
Canada joins the club
-
@bungdan
Dan Murphy
on bluesky
Sam Altman's malicious hacking collective keeps doing malicious hacking things. “We don't have the legal tools to stop this unprecedented hacking,” wail officials who very much do have the tools. www.ft.com/content/1150...
-
@leahmcelrath
Leah McElrath
on bluesky
⚠️ OpenAI's models took data from 55 websites belonging to businesses, non-profits, and government agencies — Groups affected include the US Centers for Disease Control and Prevention, the US Securities and Exchange Commission, and the International Energy Agency.
-
@campuscodi.risky.biz
Catalin Cimpanu
on bluesky
“AI-powered probes targeted Canadian and US government sites, with officials reporting no evidence of successful breaches” — www.verdict.co.uk/canadian-web...
-
@metacurity.com
Cynthia Brumfield
on bluesky
The AI agents who targeted the Australian government successfully accessed staging environments, used attacker reconnaissance tactics, and probed a broader set of websites, including those of the CDC, SEC, International Energy Agency, and Mayo Clinic. — www.asymmetricsecurity.c…
-
@campuscodi@mastodon.social
Catalin Cimpanu
on mastodon
RE: https://mastodon.social/... According to Transluce, the probes targeted the Library and Archives Canada, a Canadian federal agency. — Government statement: https://www.cyber.gc.ca/... Transluce report: https://transluce.org/...