Artificial intelligence giant OpenAI has been chastised after an agent was revealed to have gained access to another NSW government agency.
OpenAI alerted the state government earlier this week that the agent had breached the National Parks and Wildlife Service web application in June.
WATCH THE VIDEO ABOVE: OpenAI breach hits NSW Parks and Wildlife website
Know the news with the 7NEWS app: Download today Arrow
OpenAI said the model gained access to the NSW National Parks and Wildlife Service’s Fire History service “in a way that went beyond its intended use”.
It had been tasked with gathering public data about Australian wildfires but went breached the agency to gain statistics “that weren’t publicly available through the service”.
“The results we reviewed do not show that the model retrieved any personal information,” OpenAI said.
Initial investigations into the breach suggest it didn’t access any personal information, the NSW Government said on Friday.
OpenAI has been slammed after another government agency was revealed to have been breached by an experimental AI agent. Credit: Jeff Chiu/AP
“The NSW Department of Climate Change, Energy, the Environment and Water (DCCEEW) is working with Cyber Security NSW and its technology service provider to investigate the matter and assess its impact,” the government said.
“It’s understood the incident occurred in June 2026 and was validated by OpenAI and reported through to NSW Government on 1 October 2026.”
OpenAI was made aware of the incident on Tuesday amid a review of its agents’ operations in Australia after several government agencies, including Medicare, were hacked the week prior.
The recent history of breaches sparked major criticism from journalists Suzanne Mostyn and Justin Smith on Saturday morning.
“These tech bros, they act with impunity,” Mostyn told Sunrise.
“They walk around being told, pull yourselves into line, pull your heads in and it just water off a duck’s back.”
Mostyn added that while the agent didn’t steal information from users, the company is still “scraping other people’s intellectual property”.
OpenAI says the agent accessed the National Parks and Wildlife Service while trying to find data on Australian wildfires. Credit: AAP
“They are purloining everybody’s information, everybody’s social media accounts, all our photographs, and the Australian government should hold them to account,” she said.
Smith agreed, likening the rise of AI companies to social media platforms.
“We know that we can’t rely on any of these companies to do the right thing,” he said.
“Until it’s an electoral problem for state governments and the federal government in Australia, when it’s a real electoral problem, we start screaming and kicking a little more.
“Until we do that we’re just going to go down the same track (and) it could be too late by the time we get to that point.”
Following the revelation of breaches last week, OpenAI said it was working on improving its operations in Australia.
The company admitted its systems accessed Australian government websites “in ways they were not authorised to” and conceded it should have handled its response to the incident better.
“We are sorry and working to do better in the future,” OpenAI said in a statement.
The incident only came to OpenAI’s attention in August during a review of earlier training activity following a separate cybersecurity incident involving AI development platform Hugging Face.
The company said it notified Services Australia and the Victorian Department of Health on September 10 and notified the NSW Bureau of Crime Statistics and Research on September 18.
It acknowledged it should have provided affected agencies with preliminary findings sooner.
“Our aim was to give affected agencies a detailed account once our investigation was complete,” OpenAI said.
“However, we should have shared preliminary findings sooner and kept Australian agencies updated as more facts emerged.”
Last week, Albanese said OpenAI had acknowledged there were “issues with protocols” and announced a forensic investigation led by Australia’s cybersecurity agency.
Cyber probe underway after OpenAI accesses NSW government website
1 min read
Major children’s hospital probes decades of potential chemo exposure
2 min read
