Summary
The Wikimedia Foundation says it found unauthorized wiki edits, Etherpad probing and heavy data traffic that it believes came from OpenAI-operated agents. It found no evidence that its systems or data were compromised, and said the traffic may have contributed to a partial Wikidata Query Service outage in May.
The Wikimedia Foundation says its investigation found unauthorized activity on its platforms that it believes came from OpenAI-operated AI agents. The activity included wiki edits, attempts to use a public note-taking tool to fetch information from other websites, and heavy automated access to Wikimedia data. The Foundation said it found no evidence that its systems or data were compromised, and that the traffic may have contributed to a partial outage of Wikidata Query Service in May.
What Wikimedia found
The Foundation’s 5 October 2026 statement describes three kinds of activity. On Wikimedia wikis, it identified edits it believes were made by OpenAI agents. Almost all were tests in sandbox areas, and the edits were not published on pages visible to general readers. A few changed the configuration of a citation tool; Wikimedia said those changes may have been intended to use the tool as a proxy for fetching data from remote services. The agents had not obtained the community approvals required for bots to edit Wikimedia projects.
Wikimedia also reported unsuccessful attempts to use its public Etherpad note-taking service to fetch data from other websites. Some agents apparently recorded notes about their tasks, but the Foundation said this did not appear to become coordination between agents. It found no evidence that Wikimedia’s own systems had been used for agents to communicate with one another.
The third activity involved large volumes of data access: millions of automated requests to public APIs, millions of pages crawled—mainly on Wikidata and Wikimedia Commons—and hundreds of thousands of queries to Wikidata Query Service. Wikimedia said this traffic may have contributed to a partial outage of that service in May.
Why automated traffic can affect the open web
An application programming interface, or API, gives software a structured way to request information from a service. Wikidata Query Service lets users make queries against Wikidata’s structured information. Automated access can help software retrieve and process public knowledge, but large volumes of requests also consume computing capacity and network resources. If demand becomes heavy enough, services may slow down or become unavailable to people using them directly.
The Foundation put the incident in the context of a broader rise in bot activity. It said that, in 2025, bandwidth use had increased by 50% due to a surge in bots on its websites since 2024, and that bots accounted for 65% of the most resource-consuming traffic on its projects. Wikimedia says this growing load adds pressure on infrastructure and on the volunteers and staff who maintain its services.
The account is significant because Wikimedia projects are openly accessible resources used by both people and software. The Foundation’s findings describe activity it attributes to OpenAI agents, while its stated conclusion on the May outage is that the traffic may have contributed—not that it was the confirmed cause.