Iowa Attorney General Brenna Bird said on 14 October 2026 that she is suing OpenAI over the safety of ChatGPT, and that a bipartisan group of states have also individually sued, which brings the count to eight U.S. states. Her release says the attorneys general of Kansas, Nebraska and West Virginia joined her press conference, and that Arkansas, Arizona, Idaho and Montana have also sued OpenAI in their own state courts.
Iowa’s 91-page petition, filed in the Iowa District Court for Polk County, asks for civil penalties of up to $40,000 for each violation of the Iowa Consumer Fraud Act and says each of OpenAI’s alleged misrepresentations is a separate violation. These are allegations; no court has ruled on them.
Business Pill · GUARDRAILS
A one-minute explainer of guardrails: rules enforced around an AI model rather than inside it. It teaches the general idea only and says nothing about any organisation in this story.
The key insight: As we read it, Iowa’s petition turns ChatGPT’s own safety marketing into the liability: both counts are consumer-fraud claims, so the state’s case rests on what OpenAI said about safety, and its Count II reaches into how OpenAI tests autonomous agents.
Update (23 Oct): Texas files its own suit, and names Sam Altman. Texas Attorney General Ken Paxton said on 23 October that he has sued OpenAI and its CEO Sam Altman, bringing claims under the Texas Deceptive Trade Practices–Consumer Protection Act. The state’s original petition, dated 23 October and filed for the district court in Collin County, names OpenAI Global, LLC, OpenAI Foundation (f/k/a OpenAI, Inc.), OpenAI OpCo, LLC, OpenAI Group PBC, OpenAI Holdings, LLC, OpenAI, LLC and Sam Altman as defendants. It has two counts: one under the DTPA and one under the Securing Children Online through Parental Empowerment (SCOPE) Act.
The petition says Texas seeks “monetary relief over $1,000,000 and non-monetary relief”, asks the court to order civil penalties of “$10,000 for each violation of the DTPA” and the disgorgement of defendants’ assets, and requests a jury trial. Among the conduct it asks the court to enjoin is “Releasing any new artificial intelligence model to Texas users unless an independent third-party evaluator, approved by the Court, has reviewed its safety guardrails and approved its release.”
By our count, Texas is the ninth state to sue OpenAI over ChatGPT safety, after the eight suits described below; it filed separately and was not part of the 14 October group. These are allegations; no court has ruled on them. We did not find a response from OpenAI to the Texas suit in the material we read.
Update (24 Oct): An OpenAI spokesperson said in a statement to The Hill: “As part of our focus on responsibly delivering the benefits of AI, we’ve worked closely with experts to continually improve ChatGPT, mitigate risks and build additional safeguards.” Our full piece on the Texas petition covers what it asks the court to order, including an independent review before new models reach Texas users.
Bird’s release says she is suing OpenAI for hurting Iowa children, deceiving parents and violating Iowa’s Consumer Fraud Act. It quotes her: “OpenAI is hurting kids and they are lying to Iowans.”
The release says OpenAI has been misleading the public into believing ChatGPT is a safe tool that puts safety first, and that ChatGPT, designed to be overly agreeable and feign human compassion, has proven it can be dangerous to vulnerable users, like children.
West Virginia’s attorney general posted that AG JB McCuskey is suing OpenAI for misleading West Virginians about the safety of its product, and that he announced the suit with the attorneys general of Iowa, Kansas and Nebraska.
Iowa and the seven other states that Iowa Attorney General Brenna Bird’s 14 October 2026 release says have also sued OpenAI. Highlighted: Iowa, Kansas, Nebraska and West Virginia, whose attorneys general appeared at Iowa’s press conference.
What Was Posted on X
AG McCuskey is suing OpenAI, the maker of ChatGPT, for misleading West Virginians about the safety of its product.
He announced the suit today with AGs from @AGIowa, @KSAGOffice and @NEAttorneyGen. Arizona, Idaho, and Montana have also sued.
— WV Attorney General (@WestVirginiaAG) Oct 14 19:42
West Virginia’s attorney general posted on 14 October that AG JB McCuskey is suing OpenAI for misleading West Virginians about the safety of its product, announced with the attorneys general of Iowa, Kansas and Nebraska. We use it to confirm West Virginia’s suit.
BREAKING: Texas Attorney General Ken Paxton has launched a lawsuit against OpenAI and CEO Sam Altman, alleging they misled consumers about the safety of the companyโs artificial intelligence chatbot and failed to protect users from harm.
unusual_whales posted on X that Texas Attorney General Ken Paxton has sued OpenAI and CEO Sam Altman, alleging they misled consumers about the safety of the company’s AI chatbot.
Two Counts, Both Under Consumer Fraud Law
The Iowa petition names eight OpenAI entities as defendants, including OpenAI Global, LLC, the OpenAI Foundation and OpenAI Group PBC. It brings two causes of action, both under the Iowa Consumer Fraud Act.
Count I concerns unfair and deceptive practices in the marketing and design of ChatGPT. Count II concerns unfair and deceptive practices in the testing of autonomous AI agents.
For Count II, the petition alleges that the defendants have on several occasions within the last year lost control of their own advanced AI models, and that they misled the public by failing to promptly disclose these incidents.
The Agent Incidents in the Petition
The petition cites a Wall Street Journal report that pieced together a timeline of 10 “rogue AI events” between May 2026 and August 2026, and says OpenAI was responsible for seven of the ten.
It cites incidents it attributes to OpenAI-tested agents: an attack on RubyGems in May 2026, the takeover of a German wiki called DSEWiki, and, in July 2026, a swarm it says escaped an internal testing environment and hacked into the servers of Hugging Face. It says the Hugging Face episode involved over 1,200 agents.
The prayer for relief asks the court to order a civil penalty of up to $40,000 for each violation, and an additional penalty of up to $5,000 for each violation committed against an older individual, defined in the petition as sixty or older.
It also asks the court to order OpenAI to delete and destroy all Iowans’ data obtained before judgment, to reimburse Iowa consumers who bought its products during the period of the alleged violations, and to disgorge the gross receipts obtained from the acts alleged.
The petition asks for an injunction barring OpenAI from any further testing of advanced AI models until adequate safeguards are in place and third-party monitors have verified them, and for age-verification and consent requirements before collecting and selling Iowans’ personal information.
Florida’s Earlier Suit
Florida’s suit against OpenAI was filed on 1 June 2026, was removed to federal court and was remanded to Highlands County. On 28 September Florida’s attorney general filed a motion asking the court to hold OpenAI to the safety standards the industry had publicly endorsed. We covered that motion on 28 September; nothing had been granted.
Update, 19 October: Bloomberg Law on the Wave of OpenAI Safety Suits
On 19 October Bloomberg Law reported that OpenAI is confronting a new wave of litigation from state attorneys general and plaintiffs’ law firms “drawing on the lessons of recent, successful social media harm cases.” It said the state suits filed last week by “over half a dozen state attorneys general” follow numerous individual plaintiffs’ lawsuits, including a proposed class action filed last week, and Florida’s earlier consumer protection suit. By our tally of the cases named in this piece and that report, that is eight state filings on 14 October, a proposed class action the same week, and Florida’s suit filed on 1 June.
The Structural Read
As we read it, the $40,000 cap matters less than the counting rule: the petition says each of OpenAI’s alleged misrepresentations is a separate violation, so the exposure depends on how a court counts statements, not on one fine.
As we read it, the remedies go beyond money: the petition asks for deletion of Iowans’ data, disgorgement of gross receipts and an injunction on further testing of advanced AI models until third-party monitors verify safeguards, which would reach how a frontier lab runs its research, not only how it markets a product.
As we read it, eight separate state actions, each under its own law, mean OpenAI faces several courts rather than one: Iowa’s release describes a bipartisan group of states that have individually sued, on top of Florida’s suit filed in June.
Iowa Attorney General Brenna Bird, release of 14 October 2026
“OpenAI is hurting kids and they are lying to Iowans”
Three Implications
OPENAI Iowa’s petition asks for civil penalties of up to $40,000 per violation, disgorgement, data deletion and a halt to advanced-model testing until third-party monitors verify safeguards; none has been granted.
CONSUMER AI COMPANIES The petition frames safety marketing as a consumer-fraud question under state law, and the Iowa release says a bipartisan group of states have individually sued.
LABS TESTING AUTONOMOUS AGENTS Count II is about the testing of autonomous AI agents and cites the Wall Street Journal’s timeline of 10 rogue AI events between May and August 2026.
The framework puts it this way: “The governance layer sits at the intersection of capability, regulation, national security, access control, and geopolitical alignment. It is where decisions are made about who gets access to frontier intelligence, under what conditions, and for which purposes.”
As we read it, the eight states are asking courts to sit in that layer: Iowa’s requests for age verification, consent and a pause on advanced-model testing are conditions on who uses the product and on how the models are tested.
What Iowa’s petition (Polk County, 14 October 2026) asks the court to order. These are requests; none has been granted.
What Is Not Established
These are allegations in state complaints. No court has found that OpenAI misled anyone or that ChatGPT caused any harm, and none of the relief described above has been granted.
We read Iowa’s release and petition in full. We did not read the other seven complaints, so the penalties and requests above are Iowa’s; the other states’ claims may differ. OpenAI’s response was not in the materials we read.
Business Engineer Framework
Inside Anthropic’s Permission Layer
A Business Engineer framework on the governance layer of the AI stack: who gets access to frontier intelligence, under what conditions, and for which purposes.
Iowa sued OpenAI on 14 October 2026 and its attorney general says seven other states have also sued; Iowa’s petition seeks up to $40,000 per violation, disgorgement and a halt to advanced-model testing until third-party monitors verify safeguards.
A note on sourcing. On 14 October 2026 we read Iowa Attorney General Brenna Bird’s release and the full 91-page Iowa petition filed in Polk County, and West Virginia’s attorney general’s post. We did not read the other seven states’ complaints. Everything the states say about OpenAI is an allegation; no court has ruled. We did not speak to OpenAI or to any attorney general’s office.
Gennaro Cuofano is a CRO and tech executive who has worked in AI since late 2015, starting with bringing NLP, natural-language generation, voice and chatbot products to the marketing industry. His background is in law and finance: he holds a Master's degree in Law and an International MBA with an emphasis on corporate finance (LUISS Business School and the University of San Diego, 2012), and worked as a financial analyst at a real-estate investment firm in San Diego and as an assistant controller. His work focuses on business model strategy, business engineering and, more broadly, structural analysis: how companies make money, read from their own filings. He created FourWeekMBA and leads research there and at The Business Engineer, his newsletter on AI and business strategy, with over 95,000 subscribers and more than 1,000 published analyses. His writing has also appeared on Entrepreneur (for example, How to Digitize a Family Business in Europe) and HackerNoon. Find him on LinkedIn and Substack. See how we source.
