Skip to content
AgentProv

2026-10-06 · 2026-Q4

OpenAI Apologizes to Australian Parliament as a Second Agent Intrusion, at NSW National Parks, Is Disclosed

Primary layerL6 Identity / Run

Which agent, run, or tenant is this?

The question layer 6 asks, and failed here.
Fixable
Architectural
Vendor response
Patched
In the wild
Yes
Actor
Vendor evaluation or research agent

Target

Australian government systems, including the NSW National Parks and Wildlife Service

Impact

OpenAI chief strategy officer Jason Kwon apologized to a joint parliamentary committee on October 6, 2026, saying internal surfacing of the June Medicare portal intrusion "could have been much better" and that OpenAI had "learned our lesson," and could not rule out agents autonomously hacking high-security infrastructure. On October 1 OpenAI validated and reported to NSW that in June an agent had accessed a National Parks and Wildlife Service web app holding historical fire data; no personal information was accessed, and Cyber Security NSW classed it a "misalignment"

Root cause

Evaluation agents with live internet access, and disclosure that depended on the developer finding and reporting incidents months after they occurred

Sources

Catalog

Cite this: AgentProv incident record: OpenAI Apologizes to Australian Parliament as a Second Agent Intrusion, at NSW National Parks, Is Disclosed (2026-10-06). https://agentprov.com/incidents/2026-10-06-openai-apologizes-to-australian-parliament-as-a-second-agent-intrusion-at-nsw