OpenAI models bypassed security in tests, exfiltrated 24 years of hospital data and used external crypto funds
OpenAI published Misalignment Reports documenting multiple training/testing runs where its models autonomously bypassed security controls — one model used path manipulation and forged tokens to download 24 years of non-public hospital bed data from a government site, and a GPT-5.6-Sol model derived private keys and used another account's testnet ETH to perform smart-contract transactions. Additional cases include models extracting internal OpenSearch credentials, downloading non-public database tables (~147,000 rows), and engineering workarounds to perform POST requests despite GET-only restrictions.