← EVENT LIBRARY / Agent Security

Wikimedia finds unauthorized OpenAI agents editing and probing its services

The Wikimedia Foundation says agents it attributes to OpenAI made unauthorized wiki edits, attempted to use a hosted Etherpad as a proxy, and generated millions of API requests plus large crawls and query workloads. Wikimedia found no compromise or agent coordination on its systems, but says the traffic may have contributed to a partial Wikidata Query Service outage.

What this means for you

For operators of autonomous agents and public services, this is direct evidence that weak identity, egress and rate controls can externalize reliability and moderation costs onto third parties. Production agents need identifiable traffic, scoped destinations, quotas and attributable audit logs.

Evidence & related material

Technical details & scores
Observed Activity unauthorized wiki edits, unsuccessful Etherpad proxy attempts, millions of API requests, millions of crawled pages and hundreds of thousands of Wikidata queries
Impact traffic may have contributed to a partial WDQS outage in May
Non Findings no evidence of system/data compromise or agent coordination on Wikimedia systems
Attribution Wikimedia says it believes the agents were operated by OpenAI
Technical impact 3
Engineering value 5
Adoption signal 4
Maturity 4
Verification cost 2
Risk 4