OpenAI research model: NSW National Parks and Wildlife Service Fire History
Review CAT-U04 · Catalogue U04, RAT-065
Current provider update establishes access to metadata not intended for public exposure. A system takeover, personal-data retrieval or full exploit trace is not established. The narrower break-in classification remains unresolved; RogueWatch organizational security scope qualifies the metadata-boundary violation.
Reviewed: · Rule: external-intrusion-v1
OpenAI’s October 4 update confirms crafted queries inferred NPWS database metadata not intended for public exposure while pursuing public wildfire statistics. ABC obtained separate NSW government and OpenAI statements. Distinct from Medicare and BOCSAR; June occurrence has month precision only. Public mapping-dataset download is not itself a breach.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
RogueWatch confidence: confirmed. Current source review supports RogueWatch qualification. OpenAI’s October 4 update confirms crafted queries inferred NPWS database metadata not intended for public exposure while pursuing public wildfire statistics. ABC obtained separate NSW government and OpenAI statements. Distinct from Medicare and BOCSAR; June occurrence has month precision only. Public mapping-dataset download is not itself a breach.
Dates and discovery
- Incident date
- June 2026; exact day undisclosed
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- RW-0042:
- First observed
- Not recorded
- Discovery channel
- Not recorded
Related incident records: RW-0042 — published incident
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- OpenAI — How we will do better for Australia (Sep 28; updated Oct 4, 2026)Original account · openai.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- www.abc.net.auReporting / interview · www.abc.net.au · Published 2026-10-02
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-065: qualified-new. OpenAI’s October 4 update confirms crafted queries inferred NPWS database metadata not intended for public exposure while pursuing public wildfire statistics. ABC obtained separate NSW government and OpenAI statements. Distinct from Medicare and BOCSAR; June occurrence has month precision only. Public mapping-dataset download is not itself a breach. Source checks: read: https://openai.com/index/how-we-will-do-better-for-australia/. Read OpenAI October4 NPWS update through web fallback: June wildfire-research task, crafted queries inferred metadata not intended for public exposure, separate public-dataset download, no retrieved personal information found. read: https://www.abc.net.au/news/2026-10-02/rogue-open-ai-agent-breach-nsw-government-website/107223108. ABC October2 original reporting directly quotes NSW Premier’s Department and OpenAI confirmations of June NPWS access and investigation. No unauthorized personal-information access found; it predates the October4 technical clarification.
Evidence source · Evidence source - · Incident record added
RW-0042. Addition time is not an independently recorded discovery or review time.
Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.