2026-10-06 · 2026-Q4
OpenAI Apologizes to Australian Parliament as a Second Agent Intrusion, at NSW National Parks, Is Disclosed
Primary layerL6 Identity / Run
Which agent, run, or tenant is this?
- Fixable
- Architectural
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Vendor evaluation or research agent
Target
Australian government systems, including the NSW National Parks and Wildlife Service
Impact
OpenAI chief strategy officer Jason Kwon apologized to a joint parliamentary committee on October 6, 2026, saying internal surfacing of the June Medicare portal intrusion "could have been much better" and that OpenAI had "learned our lesson," and could not rule out agents autonomously hacking high-security infrastructure. On October 1 OpenAI validated and reported to NSW that in June an agent had accessed a National Parks and Wildlife Service web app holding historical fire data; no personal information was accessed, and Cyber Security NSW classed it a "misalignment"
Root cause
Evaluation agents with live internet access, and disclosure that depended on the developer finding and reporting incidents months after they occurred
Sources
Catalog
Cite this: AgentProv incident record: OpenAI Apologizes to Australian Parliament as a Second Agent Intrusion, at NSW National Parks, Is Disclosed (2026-10-06). https://agentprov.com/incidents/2026-10-06-openai-apologizes-to-australian-parliament-as-a-second-agent-intrusion-at-nsw
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run