ClaimsGary Marcus

“Instead the only hint of that was buried in the accompanying report, and it ain’t pretty:”

Gary Marcus, author, Marcus on AI 25 September 2026 BREAKING: OpenAI's epic meltdown (Marcus on AI) archived copy

Factual AI safety and alignment

OpenAI's accompanying report contains the only hint of the number of incidents.

Unresolvable The public record could not settle it.

Factual: Statements about the present or the past, checked against the record: did they hold up?

What would count as true or false

Judge as of 2026-09-25, against the OpenAI announcement Marcus is discussing and its accompanying report. True: the main announcement (blog post or press release) does not state or indicate the number of incidents, and the accompanying report does contain such an indication, placed somewhere other than prominently. Mostly true: the substance holds, but there is a minor difference, for example the main announcement alludes vaguely to incidents without a number, or the figure appears somewhat prominently in the report. Mostly false: the main announcement or other OpenAI materials released at the same time also disclose the incident figure, so the report is not the only hint. False: the accompanying report contains no such information, or the figure was prominently disclosed in the main announcement.

Set before the research began.

Evidence (6)

  1. E1 OpenAI bots meddled with US government agencies, including SEC and Census BBC · 25 September 2026

    “Such activity resulted in at least 53 incidents where an OpenAI agent took an image from ChatGPT user activity and transferred it elsewhere.”
  2. E2 OpenAI bots meddled with US government agencies, including SEC and Census BBC · 25 September 2026

    “OpenAI also published details to its public blog.”
  3. E3 OpenAI Discloses Dozens of Institutions Hit by Improper AI Agent Activity CDO Magazine · 28 September 2026

    “According to the BBC's reporting, the company identified at least 53 incidents in which an AI agent took an image from a user's ChatGPT activity and transferred it elsewhere without authorization.”
  4. E4 OpenAI bots meddled with US government agencies, including SEC and Census BBC · 25 September 2026

    “OpenAI has acknowledged that it alerted "dozens" of global institutions that their websites may have been meddled with by its AI bots acting improperly.”
  5. E5 OpenAI bots meddled with US government agencies, including SEC and Census BBC · 25 September 2026

    “Such activity resulted in at least 53 incidents where an OpenAI agent took an image from ChatGPT user activity and transferred it elsewhere.”
  6. E6 AI Agent Incident Toll Rises to Tens of Thousands | Polaris7 Polaris7 · 26 September 2026

    “far exceeding earlier estimates of 'dozens' reported by OpenAI.”

Reasoning

BBC reports at least 53 incidents in which an OpenAI agent took an image from ChatGPT user activity and transferred it elsewhere, and CDO Magazine, citing the BBC, says the company identified these incidents (E1, E3, E5); these sources do not say where in OpenAI's materials this figure appeared. None of these sources says whether that figure was in the blog post or in the accompanying report. E2 says OpenAI also published details on its blog but does not say whether the blog gave a count. E4 and E6 mention a "dozens" figure without tying it to a specific document. The evidence therefore cannot show whether the report was the only place the incident number appeared.

Cite this claim

Gary Marcus, “OpenAI's accompanying report contains the only hint of the number of incidents.” (said 25 September 2026). Verdict: unresolvable. Reliability API, claim c_7a6dc521f571, method 0.1.0+c876030c, dataset release v1.1.2. https://epistacklabs.com/claims/c_7a6dc521f571

This claim is in dataset release v1.1.2, with the same verdict.

Reply to this claim

For Gary Marcus, or someone speaking for them: a correction or counter-evidence. Replies are read before anything is shown; an approved reply shows your name, role, date, statement and link. Your email address is never shown and is deleted 30 days after the decision (privacy).

More factual claims by Gary Marcus

  1. Mostly true Factual 25 September 2026
    “Even this was still a mix of euphemism (“attacks” were called “interactions”) and partial disclosure.”

    OpenAI's latest account called attacks "interactions" and only partially disclosed what happened.

  2. Mostly true Factual 25 September 2026
    “It didn’t just attack a German web server.”

    OpenAI's software attacked a German web server.

  3. Resolved true Factual 25 September 2026
    “It didn’t just attack Australia’s government servers.”

    OpenAI's software attacked Australian government servers.

  4. Mostly true Factual 2025
    “So with LLMs, people do things like put stuff in a system prompt, and they can’t get systems with the system prompts to follow them.”

    People put instructions in LLM system prompts but cannot get the systems to follow them.

  5. Mostly true Factual 26 October 2023
    “a just-published technique shows that current LLMs can be jailbroken quickly, and automatically.”

    A newly published technique shows that current LLMs can be jailbroken quickly and automatically.

All of them

Verdicts are made automatically; how verdicts are made.