Home
Ai
Ai News
OpenAI Agents Used Multiple Workarounds to Access UN Data: Researcher

OpenAI Agents Used Multiple Workarounds to Access UN Data: Researcher

The researcher also notified UNCTAD’s security team about the method used to get around one of the API restrictions before publishing the findings.

Written by Sucharita Ganguly, Edited by Rohan Pal | Updated: 28 September 2026 20:11 IST

OpenAI Agents Used Multiple Workarounds to Access UN Data: Researcher

Photo Credit: Unsplash

The researcher does not classify the activity as hacking

Click Here to Add Gadgets360 As A Trusted Source

Highlights

The agents sought publicly available economic data
The agents tried several ways to bypass access restrictions
The researcher found 55 uses of one workaround

AI agents believed to be linked to OpenAI made more than 16,500 scans of a United Nations statistics platform over two months, according to security researcher Rowan Howard-Jones. The activity involved attempts to retrieve publicly available trade and development data, but the agents changed their methods when they encountered access restrictions. The researcher found evidence of proxies, encoded requests and other workarounds during the activity. However, the available records do not establish the exact instructions given to the agents or whether all the scans came from the same system.

OpenAI Agents Linked to Aggressive Scraping of UN Statistics Site

According to Howard-Jones' blog post, the activity targeted UNCTADstat, the statistics platform operated by the UN Conference on Trade and Development, between April 13 and June 19, 2026. The agents appeared to be looking for data on areas including the Productive Capacities Index, food trade and tradable industries. The researcher says the activity could have been linked to a set of questions used to train or evaluate AI models, although the exact purpose remains unclear.

Openai Discussion

Explore More...

The researcher traced the activity through public Urlquery records. When the agents could not access some of the UNCTADstat data directly, they tried different ways to get around those restrictions. They used web pages and third-party services to send requests to the UN site, and also used Google's XSS Game to run scripts that could retrieve data. An attempt to use another Google security testing platform, Firing Range, was unsuccessful.

OpenAI Could Launch a New Cybersecurity-Focused AI Model

The agents also kept changing their approach when requests failed. They tried different names for API parameters and modified their requests after apparently assuming that a filter was blocking them. In another case, they altered the way an API address was written so a request could get through a restriction. The researcher found 55 instances of this method between May 4 and June 19.

UNCTADstat eventually rate-limited 82 requests. The activity continued despite those restrictions. The researcher notes that the agents were seeking publicly available information and does not describe the activity as hacking.

The senior security researcher believes an OpenAI connection is highly likely based on identifiers used by the agents, links between their infrastructure and similarities with other activity previously attributed to OpenAI agents. Some of the requests carried labels including CHATGPTTEST1 and OAI_META_1312. However, the researcher could not identify the specific OpenAI model, product or team involved. The evidence also does not establish that the UNCTAD activity was part of the same agent group seen in the other activity.

OpenAI, Anthropic Bring New AI Models Amid Growing Open-Weight Competition

The researcher also notified UNCTAD's security team about the method used to get around one of the API restrictions before publishing the findings. The investigation relied on publicly available records and does not indicate that the UNCTADstat service itself was compromised.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: OpenAI, OpenAI agents, UNCTAD, UNCTADstat, United Nations, AI agents, AI, artificial intelligence

Sucharita Ganguly

Email Sucharita Ganguly

Sucharita is a writer with Gadgets 360 and is mostly found playing with her cat in her free time. She has previously worked at breaking news desks across organizations. Powered by coffee, The Beatles, Bowie, and her newfound love for BTS, she aims to work towards contributing to a better media environment for women and queer folk. More