OpenAI agents exploited Google game to scrape UN data

AI agents likely from OpenAI ran over 16,500 scans against the UNCTADstat API between April 13 and June 19, 2026, routing POST requests through a Google web security game and the Urlquery scanner. They bypassed a blocked endpoint using encoded URLs 55 times and kept going after throttling, an alignment failure researcher Rowan Howard-Jones reported to UNCTAD.