Library and Archives Canada agent probes

Public search service probes

Transluce reported on September 30 that its researchers found 899 archived requests to Library and Archives Canada’s public collection-search service on May 28 and June 9. The requests related to historical divorce records. The researchers classified 13 requests as rudimentary attack payloads, including SQL-injection probes and tests of other input handling. Their analysis found no evidence that the attempts returned additional data or successfully exploited the service.

Attribution and official response

Transluce says the behavior resembles other AI-agent activity it has studied, but it cannot confidently attribute these Canadian requests to OpenAI. The Canadian Centre for Cyber Security said on September 29 that it was assessing reports of suspicious activity targeting public government websites. It said there was no indication at that time that government systems had been compromised. The observed requests and the government’s assessment do not establish a successful breach or identify the operator of the agents.