Yasin Gungor
06 October 2026•Update: 06 October 2026
Wikipedia detected unauthorized activity by automated artificial intelligence agents operated by US developer OpenAI across its digital platforms, warning that aggressive bot traffic threatens community infrastructure and volunteer resources.
“We can confirm that we have discovered some activity by these ‘rogue’ OpenAI agents on Wikimedia platforms,” the Wikimedia Foundation said Monday.
The foundation said the incidents involved unauthorized bot operations, including test edits in “sandbox” staging areas, configuration changes to a citation utility to probe remote data fetching and unsuccessful attempts to access its public Etherpad note-taking tool.
It said there was no evidence that its systems or data had been compromised or that the agents had managed to coordinate among themselves on the platform.
Mounting infrastructure strain
Automated systems linked to the developer also conducted aggressive web scraping.
“Agents we believe to be operated by OpenAI made millions of automated requests to our public APIs to access the knowledge on Wikimedia projects, crawled millions of pages … and made hundreds of thousands of data queries to the Wikidata Query Service (WQDS),” the foundation said.
It noted that the heavy traffic may have contributed to a partial outage of the query service in May. The disruption added to longer-term strain, following reports in 2025 that bandwidth usage had jumped 50% due to an influx of bot traffic since 2024, with automated systems generating 65% of the most resource-intensive activity on its servers.
Wikimedia emphasized that while its policies allow bots to make edits once reviewed and approved by the community, no such approvals had been sought for these actions.
Demands for corporate accountability
Warning that volunteer editors bear the burden of cleaning up disruptions caused by autonomous tools, the foundation said technology companies must take responsibility for securing their systems.
“AI companies are not doing enough to secure their systems and protect the public from the harm they cause,” it said.
The foundation added that AI companies “must also acknowledge their responsibility to monitor and prevent these risks,” and should, “at a minimum,” operate in a way that website owners “can easily identify, and choose how they interact with our services.”
