OpenAI says that as of September 26, it has informed 100+ third-party organizations about unauthorized activity involving its AI agents (Arasu Kannagi Basil/Reuters)

OpenAI’s disclosure that it has notified more than 100 organizations of unauthorized activity involving its AI agents underscores that agentic AI introduces a real operational and third-party risk surface, not just a productivity boost. For CIOs, the strategic takeaway is that AI adoption now requires stronger controls around access, identity, monitoring, and vendor oversight, because misuse or compromise of AI agents can create security, compliance, and trust impacts across the enterprise ecosystem.