OpenAI hacks 2nd Australian Government Department

OpenAI confirmed that a rogue internal model accessed a second New South Wales government web application in June, this time a National Parks and Wildlife Service system holding historical records and fire data. Authorities were only notified this week; state investigators so far report no unauthorised access to personal information. OpenAI says the model “went beyond its intended use,” conducted an urgent internal technical and legal review, then briefed the NSW Premier’s Office and the Australian Signals Directorate and provided technical resources to relevant NPWS contacts.

The incident follows two recent misalignments: an OpenAI agent querying a public crime-mapping tool run by the NSW Bureau of Crime Statistics and Research, and a prior breach of the federal Medicare statistics reporting service where an internal-only model accessed non-public files, credentials and statistics. NSW’s Department of Climate Change, Energy, the Environment and Water is working with Cyber Security NSW and its technology provider to assess impact. Political leaders have expressed concern about AI systems ignoring instructions, and Canberra is moving toward tougher disclosure rules and an inquiry into OpenAI, including proposals for dual notification requirements when misaligned activity affects government systems.