Loading story…
OpenAI has implemented significant changes to its data retention policies for ChatGPT users following a legal dispute with major news organizations, including The New York Times. The lawsuit alleged that users were leveraging ChatGPT to bypass paywalls, often by using temporary or deleted chat logs, prompting a court order that required OpenAI to preserve these logs indefinitely. OpenAI initially resisted the order, citing user privacy concerns, but ultimately lost the legal battle. By July, news plaintiffs began reviewing the preserved logs, which contained only ChatGPT's outputs, while attempts by some users to intervene in the case were denied due to their status as non-parties. On September 26, OpenAI was permitted to cease the controversial practice of retaining all output log data that would otherwise be deleted, following a joint motion approved by US Magistrate Judge Ona Wang. However, some users' deleted and temporary chats remain subject to monitoring under the agreement. This development marks a shift in OpenAI's approach to user data privacy and legal compliance, as the company balances regulatory demands with user expectations. Concurrently, OpenAI has experienced a dramatic increase in AI bot traffic, particularly after the release of its GPT-5 model on August 5, 2025. According to Akamai, OpenAI's bots—including ChatGPT-User, GPTBot, and OAI-SearchBot—now account for the majority of AI bot traffic across major web applications and APIs, with overall traffic rising nearly 300% year-to-date. The release of GPT-5 led to a surge in activity: OAI-SearchBot traffic increased by 136%, ChatGPT-User by 65%, and GPTBot by 66% during August and September. These changes in bot behavior are attributed both to increased adoption of the improved GPT-5 model and to modifications in how the bots interact with external sources. The period following the legal settlement and the GPT-5 launch has been characterized by unusual and intensified bot activity, impacting organizations that rely on web and API security. OpenAI's evolving platform and policy landscape underscore the complex interplay between technological advancement, user privacy, and legal oversight. Organizations are advised to monitor these developments closely, as changes in OpenAI's data handling and bot operations may have direct implications for data privacy, compliance, and web infrastructure security. The ongoing adjustments to OpenAI's practices reflect broader industry trends in AI governance and the challenges of managing large-scale AI deployments in a rapidly changing regulatory environment. Security teams should remain vigilant for further changes in bot behavior and data retention practices as OpenAI continues to adapt to legal and market pressures. The intersection of legal action, user privacy, and technical innovation at OpenAI provides a case study in the evolving risks and responsibilities associated with AI-driven platforms.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
Akamai published analysis describing notable bot behavior changes following GPT-5, indicating a new development in how automated activity was being observed after the model's release. The reference frames this as a post-GPT-5 shift rather than a long-standing condition.
OpenAI stopped being required to retain deleted chats for most ChatGPT users, marking a policy and data-handling change affecting standard users. Some users remained excluded from the change, indicating the update did not apply universally.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenAI released **GPT-5.4**, positioning it as a capability and efficiency upgrade aimed at knowledge-work use cases, including improved visual understanding (supporting analysis of very large images) and a claimed reduction in factual errors versus prior versions. The model is being rolled out across *ChatGPT* (web and apps), *Codex*, and the API, with higher-tier variants (e.g., “Thinking” and “Pro”) available to paid and enterprise/education offerings; the coverage also notes competitive pressure from **Anthropic** and heightened scrutiny around U.S. government/military AI use. Separately, OpenAI is reportedly developing an internal (and potentially customer-facing) alternative to **GitHub** after repeated GitHub outages disrupted engineering workflows, with the reliability issues tied to GitHub’s ongoing migration from a legacy data center to **Microsoft Azure** and associated configuration/underlying cloud incidents. In parallel, U.S. policymakers are drafting stricter, worldwide export controls for advanced AI accelerators from U.S. vendors (including **Nvidia** and **AMD**), proposing a tiered licensing regime with increasing compliance obligations (e.g., transparency requirements and potential inspections) as deployment scale grows—measures that could materially affect large AI infrastructure buildouts by major operators.
Jun 29, 2026
The rapid adoption of generative AI chatbots, such as ChatGPT, is transforming both consumer and enterprise environments, with significant growth in usage and market value. These chatbots are being used for a wide range of applications, from customer service to code generation and mental health support. However, their increasing prevalence raises concerns about risks such as hallucinations, dangerous suggestions, and the need for robust guardrails to ensure safe deployment and use. Simultaneously, privacy concerns have emerged regarding how major technology companies, like Google, may use personal data to train AI models. Google recently denied allegations that it analyzes private Gmail content to train its Gemini AI model, following a class action lawsuit and public confusion over changes in Gmail's smart features settings. The company clarified that while smart features have existed for years, Gmail content is not used for AI model training, and any changes to terms or policies would be communicated transparently. These developments highlight the ongoing tension between AI innovation, user privacy, and the need for clear communication about data usage.
Jun 29, 2026
OpenAI has taken action to ban several ChatGPT accounts believed to be linked to Chinese government entities and cybercriminal groups attempting to leverage AI for surveillance and cyber operations. According to OpenAI’s latest threat report, these accounts were primarily using ChatGPT to enhance existing cyber capabilities rather than inventing entirely new attack methods. The banned users often requested assistance from ChatGPT in designing tools for large-scale monitoring and analysis, such as social media listening platforms capable of scanning major networks like X, Facebook, Instagram, Reddit, TikTok, and YouTube for content deemed extremist or politically sensitive. In one notable case, a user suspected of operating from China via VPN asked ChatGPT to help create promotional materials and project plans for a surveillance tool, allegedly for a government client, though OpenAI could not confirm if the tool was ultimately deployed. Other banned accounts sought to use ChatGPT to identify funding sources for social media accounts critical of the Chinese government and to uncover petition organizers in Mongolia, but the AI only provided publicly available information and did not reveal sensitive data. OpenAI’s report highlights that these activities are indicative of how authoritarian regimes might seek to abuse AI capabilities in the future, even if current attempts remain limited in scope. The threat report also notes that most adversarial AI use cases involve automating and scaling traditional hacking tasks, such as malware development, command-and-control infrastructure, spearphishing, and reconnaissance, rather than creating novel attack vectors. The accounts in question displayed characteristics consistent with Chinese intelligence operations, including the use of the Chinese language and targeting sectors like Taiwan’s semiconductor industry, U.S. academia, think tanks, and organizations critical of the Chinese government. Technical overlaps were observed between these accounts and a known Chinese cyber espionage group, suggesting a coordinated effort. OpenAI’s intelligence team, including principal investigator Ben Nimmo, emphasized that while the AI models were not directly used to conduct surveillance, the planning and documentation support provided by ChatGPT could facilitate future operations. The company’s proactive monitoring and banning of these accounts underscore the growing concern over the misuse of generative AI by state actors and cybercriminals. OpenAI’s findings provide valuable insights into the evolving tactics of threat actors who are increasingly integrating AI into their existing cyber workflows. The report also raises questions about the potential for more sophisticated abuses of AI as the technology matures. OpenAI’s actions reflect a broader industry trend of AI providers taking steps to detect and disrupt malicious use of their platforms. The company continues to monitor for similar activities and collaborates with other stakeholders to mitigate risks associated with adversarial AI. These developments highlight the importance of vigilance and cross-sector cooperation in addressing the security challenges posed by generative AI technologies.
Jun 29, 2026