The foundation went looking, and published what it found
The Wikimedia Foundation said on 5 October that it ran its own investigation into whether AI agents had been active on its platforms, focusing on agents operated by OpenAI, and confirmed that it found some. The foundation is careful about what it did not find: “We did not find any evidence that our systems were used for coordination among agents, nor did we find any evidence of our systems or data being compromised.”
What it did find falls into three categories.
Wiki edits. The foundation identified edits it believes came from OpenAI-operated agents. Almost all were test edits in sandbox areas, not visible to readers. A few targeted the configuration of a citation tool, which Wikimedia believes were “potentially malicious edits that were intended to misuse this tool as a proxy for fetching data from remote services”. Wikipedia policy allows bots to edit when they are disclosed and approved by the community. “None of those approvals were sought in these incidents.”
Etherpad probing. Agents the foundation believes OpenAI operates made unsuccessful attempts to compromise the public Etherpad instance Wikimedia hosts as a community service, and tried unsuccessfully to use it to fetch data from other sites as a proxy. Other agents left notes about their tasks in it, “though this did not appear to turn into coordination”.
The traffic is the part that already cost something
The third category is volume. Agents the foundation attributes to OpenAI made millions of automated requests to Wikimedia’s public APIs, crawled millions of pages — mainly from Wikidata and Wikimedia Commons — and made hundreds of thousands of queries to the Wikidata Query Service. That traffic “may have contributed to a partial outage on WQDS in May”.
Wikimedia put that in the context of a trend it has been reporting for a year. In 2025 the foundation said its bandwidth use had risen 50% because of bot activity since 2024, and that 65% of the most resource-consuming traffic on its projects came from bots. Wikipedia itself now runs to more than 67 million articles across over 300 languages and up to 15 billion page views a month.
“This intense pressure on our infrastructure not only adds costs for servers and humans,” the foundation wrote, “but if left unaddressed, can block human visitors by overloading systems and causing outages. We are already paying for costs that come with the increased activity.”
The ask is identifiability, not a ban
Wikimedia’s demand is narrower than a prohibition. “Bots and agents are part of the future of the web,” it wrote, “and the companies who unleash and profit from them must directly help avoid and repair damage they can do.” Its minimum condition is that agent systems “should operate in a way that non-profit website owners like us can easily identify, and choose how they interact with our services”.
On OpenAI, the foundation is pointed: “While OpenAI admits to agents behaving ‘unpredictably’, they must also acknowledge their responsibility to monitor and prevent these risks. AI companies are not doing enough to secure their systems and protect the public from the harm they cause.”
The detail worth holding on to is the attribution cost. Wikimedia says it is concerned about “the difficulty and effort involved in investigating and attributing this activity” — a non-profit had to run a forensic investigation to work out whose agents had been on its servers. That is the burden the foundation says is landing on everyone except the companies shipping the agents.
