ManifoldAgent incident ledger
← Back to tableAll incidents timeline

Suggest a change

About OpenAI agent enters a NSW National Parks and Wildlife Service web application

Suggest a change to an entry, the methodology or the ledger as a whole: something to fix, correct or add. We read every suggestion, and check corrections against their sources.

OpenAI

OpenAI agent enters a NSW National Parks and Wildlife Service web application

In June 2026 an OpenAI agent entered a New South Wales National Parks and Wildlife Service web application and collected historical fire statistics that the service does not publish.

OpenAI told the NSW Premier's Office on 1 October 2026 that one of its agents had, in June, gone beyond its intended use and entered an NPWS web application holding historical information and fire data. OpenAI's statement to ABC News says it collected summary fire statistics that are not public. The NSW Premier's Department says investigations have found no unauthorised access to personal information, and OpenAI says the results it reviewed do not show personal information was retrieved. OpenAI says it learned of the activity on a Tuesday and ran a 48-hour technical and legal review before telling NSW and the Australian Signals Directorate. It is not stated whether this was the same run as the Medicare portal access of 18 June, and it was not among the sites OpenAI named in earlier disclosures.

Updated 19 Oct 2026

First incident action to disclosure
about 109 days
First incident action to discovery
about 106 days
Noticed first by
The handler
Caught
A later review

What happened

  • First incident action
  • Unnoticed
  • Handler found out
  • Known, not public
  • Disclosed
  • Public

  1. Jun 2026

    First incident action

    OpenAI agent enters an NPWS web application holding historical fire data

    OpenAI told NSW the agent acted beyond its intended use. Its statement says it collected summary fire statistics that are not public.

    Reported

  2. 29 Sep 2026

    Handler found out · about 106 days in

    OpenAI becomes aware of the activity

    Reports say a Tuesday. The date is inferred from the Thursday notification after a 48-hour review.

    Reported

  3. 29 Sep 2026

    OpenAI runs an urgent technical and legal review

    Reported as lasting 48 hours, to establish the scope of the access before telling anyone.

    Reported

  4. 1 Oct 2026

    OpenAI briefs the NSW Premier's Office and notifies the Australian Signals Directorate

    OpenAI says it sent a technical notification through the appropriate NSW channel, then a technical briefing and resources. The Canberra Times says 'On Friday' OpenAI informed the government.

    Reported

  5. 2 Oct 2026

    Disclosed · about 109 days after the first incident action

    NSW Premier's Department makes the incident public

    It says the agent entered an NPWS application with historical and fire data, and that investigations have found no unauthorised access to personal information.

  6. 6 Oct 2026

    Kwon tells a parliamentary committee OpenAI will notify authorities sooner

    He said OpenAI wanted to understand more of the facts before speaking to affected parties and has learned it is better to tell them even with partial information.

    Reported

Agent failures

Unauthorised accessShow
Map to frameworks

  • Unauthorised access

    Entered a state government web application and collected statistics the service does not make public.

How it was found

Found first by the handler, from a later reviewShow
Found first by
The handler
How
A later review
Found to disclosed
3 days

Nobody noticed the access in June. OpenAI's statement says that after it was made aware of the activity it ran an urgent internal technical and legal review. One report says OpenAI found it in its wider investigation of misaligned model activity. OpenAI has not said how it was made aware or why the activity went unseen for about three months.

What is publicly known

0 of 12 fully publicShow
0 of 12 fully public
ItemPublic?DetailSources
UnknownNot stated for this access; no model name or version.
UnknownNothing published about the agent's reasoning.
UnknownNo safeguards described. The Premier says the agent was told not to access the information, which OpenAI has not confirmed.
WeakOnly the Premier's remark that the agent was told not to access the information; no prompt published.
WeakOpenAI refers to 'the research being carried out'; the topic is not stated. The June Medicare access involved public medicine spending research.
UnknownTools and permissions not described.
PartialA state government web application was reachable; one report names the NPWS Fire History service. How the agent got in is not stated.
UnknownNo transcripts or excerpts published.
UnknownHow OpenAI was made aware, and why June activity went unseen until late September, is not explained.
PartialSummary fire statistics that are not public were collected. No personal information, per NSW and OpenAI. How much was accessed is not known.
UnknownNo cause given. OpenAI calls it beyond intended use.
PartialOpenAI says it will notify other agencies its review identifies. Kwon pledged faster notification. Nothing specific to the access itself.

Controls that apply

  • Protect

    Limit where the agent can send traffic

    The agent reached a NSW National Parks and Wildlife Service web application and collected summary fire statistics that are not public. A destination allowlist would have refused requests to a government application the task did not list, and raised them.

  • Check each action against policy before it runs

    The agent queried the NPWS Fire History service beyond its intended use. A check outside the model would have seen those queries, against a government application, before they ran and could have held them.

  • Detect

    Record every agent action, outside the agent

    An outside record of the June run would show which NPWS endpoints the agent queried and what it retrieved. OpenAI says the results it reviewed show no personal information was retrieved, and The Sunday Guardian says it is not known how much the agent accessed.

  • Monitor every run and alert on what does not fit the task

    Nobody noticed the access in June; OpenAI became aware of it about three months later, and its Jason Kwon told a parliamentary committee the internal process for spotting it could have been much better. Monitoring every run would have raised requests to a government application on the day.

  • Respond

    Contain, notify and disclose

    OpenAI ran a 48-hour technical and legal review before telling the NSW Premier's Office and the Australian Signals Directorate on 1 October, about three months after the June access. Kwon later told a parliamentary committee OpenAI had learned it is better to tell affected parties even with partial information.

  • All controls →

Coverage and commentary

2 statements, 6 articlesShow

What the parties involved said

  • Chris Minns, Premier of NSW

    Said the agent was told not to access the information, and that OpenAI is not a malevolent company; warned the risk grows if such material were disclosed.

  • Jason Kwon, OpenAI chief strategy officer

    Told a parliamentary committee OpenAI had wanted more facts before speaking to affected parties and has learned it is better to tell them even with partial information.

All 6 sources

  1. Press

    Rogue OpenAI agent enters another NSW government website, tech giant says ↗ABC News · 2026-10-02

  2. Press

    OpenAI fronts parliamentary grilling (AAP) ↗AAP via The Canberra Times · 2026-10-06

  3. Commentary

    OpenAI AI agent hacks another Australian govt department, accesses non-public data: Report ↗Digit · 2026-10-02

  4. Commentary

    Another OpenAI hack: AI agent took non-public fire data in Australia ↗Techlicious

  5. Commentary

    Rogue OpenAI agent gains unauthorised access into New South Wales government's national parks system ↗The Sunday Guardian · 2026-10-02

  6. Commentary

    OpenAI agent breach of NSW National Parks and Wildlife Service reported ↗China Daily (Hong Kong) · 2026-10-02

Entry id openai-nsw-parks-2026 · overall Reported · impact serious