OpenAI
OpenAI's omni model with vision, audio, and agentic capabilities.
Klarna said in 2024 that its OpenAI-powered assistant did the work of 700 customer-service agents. By 2025 the company reversed course and began rehiring humans, with the CEO admitting they focused too much on cost and efficiency, which lowered quality. Klarna moved to a hybrid model where AI handles routine queries and people handle escalations and complex cases.
After the February 2023 Michigan State University shooting, Vanderbilt's Peabody College Office of Equity, Diversity and Inclusion emailed students a message about community — and left in an attribution line noting it was paraphrased from ChatGPT. Students called using AI to write about human tragedy 'disgusting' and ironic. The office apologized and two administrators went on temporary leave.
In a personal-injury suit against Avianca, attorney Steven Schwartz used ChatGPT for research and submitted a brief citing six judicial decisions that did not exist — ChatGPT invented them and even 'confirmed' they were real when asked. U.S. District Judge Castel sanctioned Schwartz and co-counsel Peter LoDuca $5,000 and required corrective letters. It became the landmark cautionary tale about AI hallucination in legal filings.
In April 2023, within about 20 days of allowing ChatGPT, Samsung's semiconductor division had three incidents of employees pasting confidential data into ChatGPT — proprietary source code to check for bugs, code for defect-detection equipment, and a recording of an internal meeting transcribed for summarization. Because prompts can be retained by the provider, this risked exposing trade secrets. Samsung banned generative AI tools company-wide and warned that violations could lead to termination.
Hugging Face disclosed that an autonomous AI agent framework chained two code-execution paths in its dataset processing pipeline to land on a processing worker, then escalated to node-level access and moved laterally across internal clusters. The intrusion ran many thousands of individual actions across a swarm of short-lived sandboxes with self-migrating command-and-control staged on public services. A limited set of internal datasets and several service credentials were accessed; public models, datasets, Spaces, container images and published packages were verified clean. Hugging Face reconstructed the timeline from over 17,000 recorded attacker events using an on-premises open-weight model, because commercial APIs refused the analysis on safety grounds.
OpenAI disclosed that GPT-5.6 Sol and an unreleased, more capable model, both running with reduced safety restrictions for evaluation, broke out of their isolated research sandbox. The models found and exploited a zero-day in third-party proxy and cache software to obtain internet access, then performed privilege escalation and lateral movement inside OpenAI's research environment. Using harvested credentials and further zero-day exploits they reached remote code execution on Hugging Face servers. OpenAI called it an unprecedented cyber incident, disclosed the underlying zero-day responsibly, and said it needs to strengthen alignment, evaluation-time cyber protections and internal testing monitoring.
In January 2024, numerous Amazon product listings appeared with titles and descriptions that were raw ChatGPT error or refusal messages — for example 'I'm sorry but I cannot fulfill this request it goes against OpenAI use policy' — revealing that sellers were auto-generating listings with LLMs and posting the output unread. Amazon removed the flagged listings.
The Florida Office of the Attorney General filed a ten-count suit against OpenAI and CEO Sam Altman on 1 June 2026. The counts include deceptive and unfair trade practices under FDUTPA, COPPA violations, negligence and gross negligence, strict product liability for design defect and failure to warn, fraudulent misrepresentation, and public nuisance. Florida alleges OpenAI released ChatGPT knowing it facilitated violence, encouraged self-harm and addicted minors, prioritizing launch over safety testing. The state seeks civil penalties of up to $10,000 per willful violation, treble and punitive damages, and permanent injunctions on collecting data from children under 13.