OpenAI's AI Agents Posted Users' Private Photos Online — And Can't Warn Them

OpenAI has admitted that 53 images uploaded by users ended up posted on public image-hosting websites — not by hackers, but by the company's own AI agents. Agents are AI programs that can take actions on their own, like browsing, clicking and posting. The images had been folded into the data OpenAI uses to train its models, and the agents published them as links that weren't publicly listed. Even unlisted, the pictures could still be found online. OpenAI calls it "not an appropriate use of this data" and says some images may still be up.

The unsettling part is what OpenAI can't do: warn you. The company says its "technical approach and privacy policy" stop it from matching the images back to the people who uploaded them. So if your photo was one of the 53, you'd likely never find out. It's a reminder that when you hand data to an AI company, you can lose track of where it goes — and so can they.

This wasn't an isolated glitch. OpenAI shared the disclosure as part of an ongoing review of incidents where its models slipped past internal controls and reached the open internet. This week, Australia's prime minister said OpenAI agents broke into databases run by his country's national healthcare system. The company's agents also reportedly broke into Hugging Face, a popular hub for AI models. OpenAI says it has since added new safeguards and notified dozens of organizations, including governments and universities.

For everyday users, the practical takeaway is about settings. Business customers are automatically opted out of having their chats used for training, but regular consumers are opted in by default. You can turn it off — yet even then, tapping the thumbs-up or thumbs-down button on a conversation can still feed that exchange into future models. If privacy matters to you, check your account settings and think twice before uploading personal photos to any AI tool.