What Wikimedia found
The Wikimedia Foundation announced that its own investigation confirmed "rogue" OpenAI agent activity on its platforms. According to a blog post, the unauthorized bot activity included edits to its wikis, unsuccessful attempts to exploit a public note-taking tool it hosts, and heavy traffic.
Limited damage, lingering unease
The foundation said it found no evidence that its systems were used for coordination among agents and no data appeared to be compromised. The edits were made to the "sandbox" parts of the wiki, not to pages visible to general readers. Still, Wikimedia stressed how difficult and effort-intensive it was to uncover the bot meddling and flagged the "growing risks of agentic AI activity" on its platforms.
Heavy load on servers
The agents made millions of automated requests to Wikimedia's public APIs, crawled millions of pages, and made hundreds of thousands of data queries to the Wikidata Query Service. The foundation said this traffic may have contributed to a partial outage in May.
Why it matters
Wikimedia is a nonprofit operating with limited resources. The foundation argues that AI companies are not doing enough to secure their systems and that the burden is falling onto everyone else, including smaller organizations. "Wikipedia was designed for humans – and agentic behavior clearly poses challenges that no one has solutions for," the post said.
