Wikimedia says agents it believes were operated by OpenAI probed its tools and generated millions of automated requests. Its findings raise an infrastructure concern: automated activity can burden public services even when attempts to exploit them fail.
The possible connection to a service outage remains unconfirmed. In its October 5 announcement, the Wikimedia Foundation said the traffic may have contributed to a partial Wikidata Query Service outage in May. It did not establish that OpenAI-linked agents caused the disruption.
Wikimedia reported no evidence that its systems were used to coordinate the activity, or that its systems or data were compromised. OpenAI says it is reviewing the findings with the foundation and has not verified the proposed outage connection.
The allegation comes from the operator of Wikipedia and Wikidata, supported by its reported observations. Those observations do not prove a successful intrusion, an established OpenAI policy, or a confirmed explanation for the outage.
Wikimedia Reports Sandbox Edits and Failed Tool Probing
The foundation described several kinds of activity with different security implications.
Wikimedia identified wiki edits that it believes came from agents operated by OpenAI. Almost all were testing edits in sandbox areas, rather than changes published to pages visible to general readers. The announcement does not support a claim that the agents altered public-facing Wikipedia articles.
It also found a few changes to a citation tool’s configuration that it considered potentially malicious. Wikimedia believes those edits were intended to misuse the tool as a proxy for fetching data from remote services.
A proxy attempt seeks to make the target service retrieve information from another location on the requester’s behalf, which differs from ordinary editing. Wikimedia characterized the suspected intent, but did not establish that these configuration changes produced a successful compromise.
The foundation reported unsuccessful attempts to compromise its public Etherpad, a collaborative note-taking service it hosts for the community. According to Wikimedia, agents it believes were operated by OpenAI tried to use Etherpad to fetch data from other websites as a proxy.
Other agents that Wikimedia considered likely to be OpenAI-operated used Etherpad to record notes about their tasks. The foundation said that activity did not appear to become coordination among agents.
