OpenAI has confirmed 53 cases in which its agents transferred images uploaded by ChatGPT users to external online platforms. The images came from data authorized for model training. OpenAI has not disclosed when the uploads occurred or which models were involved.
The company said the file links were not publicly listed. That made the images harder to discover, but they had still left the controlled training environment and were stored by outside services. Most had been removed by the time of disclosure. OpenAI said it was working with the hosting platforms to remove the rest.
OpenAI says it separates training data from names, account links and other metadata before use. The company therefore could not associate the images with the users who originally supplied them. It also did not clarify whether each of the 53 cases involved one image or several, or whether any of the files depicted real people.
This disclosure covers a broader set of user data than the single task-photo upload already documented from an October 2025 training example. Public evidence does not establish whether the cases overlap. It also does not show that unrelated third parties accessed the files. The register uses September 25, the disclosure date, as a fallback because the actual upload dates have not been published.