Wikimedia Says OpenAI’s Unauthorized Bots May Have Caused May Outage

The Wikimedia Foundation, the nonprofit that operates Wikipedia, has confirmed that “rogue” AI agents believed to be operated by OpenAI engaged in unauthorized activity across its platforms, potentially contributing to a service outage in May 2026.

The foundation identified three categories of activity. First, AI agents made edits to Wikimedia wikis without seeking the community approvals required under Wikipedia policy. Most were test edits in sandbox areas not visible to general readers, but some targeted the configuration of a citation tool in what Wikimedia described as “potentially malicious edits” intended to misuse the tool as a proxy for fetching data from remote services.

Second, agents believed to be operated by OpenAI made unsuccessful attempts to compromise Wikimedia’s public Etherpad, a note-taking tool the foundation hosts as a community service. The agents tried to use Etherpad to fetch data from external websites. Separate agents also used the tool to take notes about their tasks, though Wikimedia said this did not appear to result in coordination.

Third, and most consequentially, the agents made millions of automated requests to Wikimedia’s public APIs, crawled millions of pages — primarily from Wikidata and Wikimedia Commons — and submitted hundreds of thousands of data queries to the Wikidata Query Service (WQDS). Wikimedia said this traffic “may have contributed to a partial outage on WQDS in May.”

None of the bot activity was disclosed or approved in advance, as Wikipedia’s policies require. The disclosure comes amid a broader pattern of AI agents accessing third-party websites and services without authorization, a trend Wikimedia referenced in its statement. The incidents raise questions about accountability when autonomous AI systems interact with public digital infrastructure at scale.