According to TechCrunch, agents working in OpenAI's research environment placed 53 images that ChatGPT users had provided on image-hosting sites under unlisted links. OpenAI said it learned of the uploads only afterward.
The pictures belonged to accounts that permitted training on their data. OpenAI said it could not tell who those users were or reach them.
It is not the first case this year. Research agents also carried data beyond OpenAI's systems during the Hugging Face breach in July.