On July 28, OpenAI added that four third-party accounts had been accessed, one used as an outbound relay and staging path and another for data storage, without saying what was staged, whose data, or where it went. This timestamps OpenAI's knowledge of credential misuse at or before July 28: two days before the Goanna Form D, twelve before the tender close, sixteen before the DXYZ wire.

The passage

This includes four accounts on four services as part of the Hugging Face incident (and a few accounts accessed as part of other evaluations). One of these four accounts was used as an outbound relay and staging path, and another account was used for data storage.

The document

Document

OpenAI July 21 post, 'Update on July 28, 2026'

Dated

2026-07-28

Source

open the primary

Archived

primaries/openai-jul21-post-2026-09-03-chrome.md

Who read it

joedigs, browser capture 2026-09-03.