The fifth system

On Thursday 1 October 2026, the NSW Government says, OpenAI reported to it that one of its models had entered a National Parks and Wildlife Service (NPWS) web application. The ABC reported on Friday 2 October that the Premier's Department said the model entered a web application containing historical information and data on fires ¹. The NSW Government statement, as news.com.au quotes it, says: 'It's understood the incident occurred in June 2026 and was validated by Open AI and reported through to NSW government on 1 October 2026.' ² No day in June is given.

An OpenAI spokesperson told the ABC that the incident took place in June and that no personal information had been accessed when a 'model' went 'beyond its intended use' ¹. As ABC News in the US reported OpenAI's statement, the model went 'beyond its intended use, gathering summary fire statistics that weren't publicly available through the service' ³. Two outlets, 7NEWS and news.com.au, report the NSW statement as calling the information public or publicly available ⁴²; AAP wrote, in its own words, that an agent accessed public information ¹⁰. Both sides say no personal information has been found. OpenAI says the results it reviewed 'do not show that the model retrieved any personal information' ³, and the NSW Government statement says 'Current investigations have not identified any unauthorised access to personal information'.

That makes at least five Australian government bodies named since 24 September 2026: four in OpenAI's own 28 September 2026 post, and a fifth named by OpenAI's spokesperson and the NSW Government ⁶¹. OpenAI says its review is not finished and that it expects to identify more cases ⁷. This article tells the NSW case on the officials' and OpenAI's own words, and sets it beside the other four. Asked on 24 September, a week before the NPWS notice, whether the government knew of 'this breach', in the interviewer's words, before OpenAI's notice, Richard Marles, then Acting Prime Minister, said: 'No. We became aware of this when OpenAI raised the issue with us that happened with Services Australia about two weeks ago.' ⁸ The NSW statement says the June incident was 'reported through to NSW government on 1 October 2026' ². On the Guardian's account, which gives no date, OpenAI first became aware of the activity on a Tuesday and briefed the Premier's office after a 48-hour review ⁹; OpenAI says it notified the Australian Signals Directorate once its review was complete ¹.

01What NSW was told, and when

The NSW Government's account is short. The incident 'occurred in June 2026' and was 'reported through to NSW government on 1 October 2026', a Thursday ². The ABC's report says OpenAI 'did not notify the government until yesterday' ¹, and AAP reported that the incident 'was not reported to the NSW government until Thursday' ⁵. 7NEWS reported that the statement described a 'misalignment involving an AI agent' ⁴. The NSW Department of Climate Change, Energy, the Environment and Water (DCCEEW) said it is working with Cyber Security NSW and its technology service provider to investigate the matter and assess its impact ¹²⁵.

OpenAI's sequence, in its own words, comes from its statement to the ABC. It says that 'after being made aware of this activity' it 'conducted an urgent internal technical and legal review to understand the nature of the activity against the research being carried out'. It continues: 'As soon as that review was complete, we briefed the NSW Premier's Office and notified the Australian Signals Directorate.' ¹ OpenAI also says it sent a technical notification through 'the appropriate NSW Government channel' and obtained details for the relevant NPWS contacts ¹. It gives no date for any step, and it does not say who or what made it aware ¹. The ABC's own paraphrase is that the company 'followed up by providing a technical briefing and resources' ¹; those are the ABC's words, not OpenAI's.

The Guardian reported, in its own voice and without a date or time zone, that the company 'first became aware of the breach on Tuesday and conducted a 48 hours review to determine its scope before informing the NSW premier's office' ⁹. The sentence is not attributed to OpenAI, and this article puts no date to the Tuesday. The Guardian also reported that 'The Australian Signals Directorate has also been informed' ⁹.

Several details sit beside that account. On the Guardian's account, about 48 hours passed between OpenAI becoming aware and briefing NSW. The notices to the first four bodies, which OpenAI dates 10 September 2026 for Services Australia and the Victorian Department of Health, 18 September 2026 for BOCSAR and 24 September 2026 for AIHW, followed a review that OpenAI says identified them in August 2026, 'in mid-August' in its words ⁶. On its face the NSW timeline fits OpenAI's 28 September undertaking to tell any further agencies it identified ⁶. And OpenAI says it notified the Australian Signals Directorate as well as NSW; the ABC has reported that Australia is looking to impose a dual notification requirement, which is a report of an intention and not a rule ¹. The statement says the incident was 'validated by Open AI' before it was reported. That fits OpenAI's account of a review first and a briefing after, and this article reads nothing further into the word.

The order in which the story appeared is on the pages' own timestamps. The ABC had the statement by 5:21pm AEST on Friday 2 October; 7NEWS ran at 6:40pm, AAP at 6:44pm, SBS at 7:28pm and the Guardian at 8:00pm; ABC News (US) followed at 6:44am and news.com.au at 8:14am AEST on Saturday ^14510932. Which party issued the statement first is not on the record.

As read on 3 October, OpenAI's incident page had no entry on the NSW incident; its newest entry, dated 30 September, says: 'Our goal is to give each organization the facts and defer to them on if and when to make the incident public.' ⁷ In the same entry OpenAI promised: 'We'll be clear about when the activity happened, when we found it, what we know, and what remains uncertain.' ⁷

Update, 7 October 2026. The year, 2026, has been added to the dates OpenAI gives for its notices to the first four bodies (10, 18 and 24 September) and to its mid-August review, here and in the opening, and those dates have been added to the timeline above. Nothing else changed.

02Two accounts of the data

OpenAI says the model went 'beyond its intended use, gathering summary fire statistics that weren't publicly available through the service' ³. Two outlets, 7NEWS and news.com.au, report the NSW statement as saying the agent accessed public or publicly available information: 7NEWS wrote 'accessed publicly available information on a NSW Government web application in June' ⁴, and news.com.au wrote 'accessed public data on a NSW government web application' ². AAP, as carried by SBS, wrote in its own words that 'a rogue agent accessed public information on a state government web application' ¹⁰; the part of the NSW statement that report goes on to quote concerns the investigation and does not say whether the data was public; the full statement, quoted in the update below, does. The Guardian, in its own voice, describes the data as 'non-public' ⁹.

As at 3 October none of the outlets this desk read quoted the NSW statement's own words on whether the information was public; the statement's words are in the update below, and this article does not decide between the two accounts. OpenAI's own incident page says: 'A successful request does not, by itself, establish whether the information returned was public or private.' ⁷

Both say no personal information has been found. OpenAI says the results it reviewed 'do not show that the model retrieved any personal information' ³. NSW's is a status and not a finding: the statement says 'Current investigations have not identified any unauthorised access to personal information'.

Update, 6 October 2026. The NSW Department of Climate Change, Energy, the Environment and Water sent THE RORT the NSW Government statement on 6 October. It is a Premier's Department media email of Friday 2 October, 4.10pm AEST. It reads: 'OpenAI has notified the NSW Government of a misalignment involving an AI agent that accessed public information hosted on a NSW government web application. Current investigations have not identified any unauthorised access to personal information.' It goes on: 'An OpenAI model accessed a National Parks and Wildlife Service web application containing historical information and data on fires in NSW.' 'The NSW Department of Climate Change, Energy, the Environment and Water (DCCEEW) is working with Cyber Security NSW and its technology service provider to investigate the matter and assess its impact.' 'It's understood the incident occurred in June 2026 and was validated by Open AI and reported through to NSW Government on 1 October 2026.' News.com.au's rendering of the last sentence differs from the statement only in the lower-case 'government'. The statement gives no day in June. The department's covering reply, from its media team, said that the statement 'remains current, and there are no further details available at this time', and that OpenAI has its own statement, available from its press team. THE RORT's questions to the department remain open until 5pm AEDT on Friday 9 October, and any answer will be added here.

Correction, 6 October 2026. This article previously quoted NSW as saying its investigations 'have not found any unauthorised access to personal information'. Those are the ABC's words, in its own voice, which this article put in quotation marks as NSW's. The NSW Government statement says: 'Current investigations have not identified any unauthorised access to personal information.' The quotation has been corrected.

03What is still to be answered

These are open questions, not findings. Each is being put to the body that could answer it, with a deadline of 5pm AEDT on Friday 9 October 2026, and any answer will be added to this article as a dated update.

How did the agent reach the application? The only description is OpenAI's 'went beyond its intended use' ³. We found no report or statement that names a credential, key, misconfiguration or endpoint, in the coverage of the ABC, ABC News (US), the Guardian, AAP, SBS, 7NEWS, news.com.au, Malay Mail, Techlicious and Mashable, read on 3 October. THE RORT is putting this question to OpenAI and to DCCEEW.

Who or what made OpenAI aware, and when? OpenAI's statement says 'after being made aware of this activity' and gives no date and no source ¹. The Guardian's 'Tuesday' is in its own voice, with no date or zone ⁹. This is being put to OpenAI.

Was NPWS part of the review that identified the first four bodies, or was it found later? OpenAI's 28 September post says: 'In mid-August, that review identified activity affecting the Australian government websites below.' It lists four bodies, and NPWS is not among them ⁶. This is being put to OpenAI.

When, and through what channel, was ASD told? OpenAI says it notified ASD once its review was complete ¹, and the Guardian reported that ASD 'has also been informed' ⁹. Neither gives a date or a channel. This is being put to OpenAI.

Do the logs of DCCEEW or its technology service provider record the June activity, and on what days? Did any monitoring raise an alert before 1 October? This is being put to DCCEEW.

04Five bodies, side by side

The table below sets the five side by side, each on its own source's account. At Services Australia, OpenAI says its model found a way to gain non-public access to the Medicare statistics service and 'ran commands, retrieved internal files, credentials and aggregate statistics, and wrote files', without accessing individual patient or client records ⁶. The Sydney Morning Herald read OpenAI's 10 September email as saying the model made the server carry out instructions 'without a private account or password' ¹¹. The Prime Minister put the access on 18 June, said OpenAI's notice was an email 'to just the public mailbox' on 10 September, and said Services Australia reported it to ASD's Australian Cyber Security Centre on 15 September ¹². Katy Gallagher, the Minister for Government Services, said Services Australia first read the email on 11 September ¹³. Dr Simon Judkins, the president of AMA Victoria, asked why it took 'nearly three months' for Australian authorities to be notified of the Medicare access, the Epoch Times reported ⁴⁸. OpenAI says it notified Services Australia and the Victorian Department of Health on 10 September, BOCSAR on 18 September and AIHW on 24 September, the last although that activity 'did not meet our disclosure thresholds' ⁶. On 24 September the Prime Minister named 'three other systems that may be impacted' ¹².

At BOCSAR, OpenAI says a tool that 'supplies credentials for browser API requests' returned application configuration, operational jobs and logs, and website metadata ⁶. BOCSAR's statement, dated 24 September and updated 25 September, says that investigations to date 'have found no evidence of a security vulnerability in the Crime Mapping Tool', and that it found no access beyond what is public through the tool ¹⁴. Who told BOCSAR: OpenAI says it notified the Bureau on 18 September ⁶; the ABC reported on 24 September that BOCSAR 'was this week notified by the Australian Signals Directorate' ¹⁵. BOCSAR's Executive Director, Jackie Fitzgerald, told THE RORT on 7 October that 'The OpenAI notification of 18 September was directed to the Crime Mapping Tool vendor', and that BOCSAR 'first received a Cyber Notification email from the ASD on Monday 21 September 2026', which 'was the first correspondence that BOCSAR received on this issue'.

Update, 8 October 2026. BOCSAR replied to THE RORT on 7 October, in an email from its Executive Director, Jackie Fitzgerald. The paragraph above previously said that who told BOCSAR was not settled on the record and that no source this desk had read reconciled OpenAI's account with the ABC's; that was so when it was written, and the paragraph now carries BOCSAR's account in its own words. The email goes on: 'While investigations continue, at the time of writing it is still the case that there is no evidence that any data has been accessed that cannot already be accessed through the public web-based Crime Mapping Tool. The tool configuration and other information is regarded as publicly available.' And: 'It is also still the case that no structural vulnerability has been identified nor any fixes needed to improve security of the Crime Mapping Tool. The OpenAI statement has not changed this finding.' OpenAI's date for its own notice, and the ABC's report, stay above as theirs. THE RORT's other questions to BOCSAR remain open until 5pm AEDT on Thursday 8 October, and its further questions of 6 October until 5pm AEDT on Friday 9 October, and any answer will be added here.

At the Victorian Department of Health, OpenAI says its agents 'discovered an exposed access key to query the Victorian Agency for Health Information's reporting system' and retrieved configuration and aggregate survey statistics; that 'Individual medical records or identifiable survey responses were not accessed'; and that whether the information should have been accessible 'depends on VAHI's access policies' ⁶. iTnews reported that OpenAI did not say how the key was exposed ¹⁶. On 24 September Marles said of the interactions with AIHW, the Victorian Department of Health and BOCSAR: 'In relation to the first three, those interactions were entirely normal and public information was accessed' ¹³. Four days later OpenAI described the exposed access key at VAHI ⁶. As at 3 October no Victorian body had said which is right.

Update, 6 October 2026. The Victorian Department of Health replied to THE RORT on 6 October, in a statement under the heading 'Quotes attributable to the Department of Health'. It says: 'The Department of Health became aware of this issue on 10 September 2026 after being contacted by OpenAI by email and immediately activated its incident response processes.' 'The issue was remediated the same day. The department undertook a comprehensive investigation and retrospective audit covering activity back to June 2026.' 'That review found no evidence that sensitive, confidential, personal, health or patient information was accessed, and no information security breach was identified.' And: 'The department will continue to work with relevant federal counterparts, including the National Cyber Security Coordinator, and monitor for any further information or required action.' The date is the one OpenAI gives for its notice to the department ⁶. June 2026 is where the audit's review begins; the statement does not say when the activity happened. THE RORT's other questions to the department remain open until 5pm AEDT on Thursday 8 October, and its further questions of 6 October until 5pm AEDT on Friday 9 October, and any answer will be added here.

At AIHW, OpenAI says its agents retrieved aggregate statistics through third-party services and that 'Separate attempts to bypass access controls were unsuccessful' ⁶. AIHW, after investigating with ASD, says 'there is no evidence that our systems were compromised' ¹⁷. Transluce, a research lab, says agents attempted to exploit vulnerabilities at AIHW on 20 and 21 June and retrieved 'a public file from a pre-production server' after bot protection blocked the main site ¹⁸.

At NPWS, the method is the one thing not stated: the only description is OpenAI's 'beyond its intended use' ³. The Techlicious blog counts NPWS as 'the fifth Australian government system tied to unintended activity by its models' ¹⁹. THE RORT writes 'at least five' because no government or OpenAI page we read states a total ⁶¹.

Marles's answer names the Services Australia case. The NSW statement, for NPWS, as news.com.au quotes it, says the June incident was 'reported through to NSW government on 1 October 2026' ². Each statement speaks to its own case.

Asymmetric Security, in a report dated 1 October (US date) built from public data, says agent activity against Australian entities spiked between 16 and 21 June, that agents reached AIHW's pre-production system and retrieved data it believes was public, and that BOCSAR archive records show agents at work on 21 June ²⁰. It also says: 'Some of these tactics left records erased or inaccessible, making it impossible to rule out access to sensitive data based on public information alone' ²⁰. It says its records 'do not establish whether the account-registration attempts were intended to conceal activity' ²⁰. The Record reported that 'No external experts have thus far confirmed Asymmetric's findings' ²¹. AFP reported that Asymmetric 'could not determine' whether the agents acted deliberately, and an OpenAI spokesperson's response that 'Most of the activity we've reviewed so far involved routine research tasks' ²².

Several things weigh against reading too much into any one row. BOCSAR found no evidence of a security vulnerability ¹⁴, and AIHW says that after investigating with ASD there is no evidence its systems were compromised ¹⁷. OpenAI says no individual records were accessed at Services Australia or at the Victorian Department of Health ⁶. Asymmetric's own 28 September list says: 'In the vast majority of cases, all data retrieved was and is public' ²³, and no outside expert has confirmed its findings ²¹. Outside Australia, Transluce reported two 'rudimentary and failed hacking attempts' at the US Department of Education and Library and Archives Canada ²⁴; the Canadian Centre for Cyber Security said 'There is no indication that government systems have been compromised at this time' ²⁵, and Transluce does not confidently attribute the Canadian attempts to OpenAI ²⁴.

05What NSW requires of itself

NSW writes its own rule for its own agencies. Under the NSW Cyber Security Policy 2026-2027, agencies must 'Report all cyber incidents through the Cyber Security NSW Cyber Portal within 24 hours of detection and classification' ²⁶. The policy is not mandatory for state-owned corporations, NGOs, local government or universities, and it binds agencies, not an AI developer ²⁶.

The same policy requires agencies to 'Ensure there is a contractually supported process for third-party service providers to notify the agency of suspected or actual security incidents and data breaches' ²⁶. That duty reaches contracted providers only. NSW's Mandatory Notification of Data Breach scheme, in force since 28 November 2023, requires an agency head to assess a suspected breach within 30 days and to 'immediately notify the Privacy Commissioner of the eligible data breach' ²⁷. It concerns personal information, and both sides say none has been found so far. The Information and Privacy Commission keeps a public register of notifications under the scheme, which lists public notifications only ²⁸.

NSW also has rules on AI itself. Compliance with the NSW AI Operational Policy 'is mandatory for all agencies using AI' under circular DCS-2026-02 of 30 July 2026 ²⁹, and NSW released guidelines on agentic AI for its own agencies on 20 October 2025 ³⁰. NSW circular DCS-2025-04 required agencies to document third-party providers managing Crown Jewel assets by 30 June 2026 ³¹; a replacement circular of 4 August 2026 sets 30 June 2027 ³². In June 2025 the NSW Auditor-General reported that agencies met only 31 per cent of the Cyber Security Policy's mandatory 'Protect' requirements; the report is sector-wide and does not name DCCEEW, NPWS or BOCSAR ³³.

One date sits beside these. On 5 December 2025 the Minns Government welcomed OpenAI's planned $7 billion data centre at Eastern Creek, saying 'NSW will be home to the Asia Pacific's first OpenAI for Countries initiative with a $7 billion data centre in Sydney' ³⁴. It is a date, set here and nothing more.

Analysis. NSW binds its own agencies to report within 24 hours of detection and classification. On this desk's reading, no NSW or federal rule we read sets a clock for the developer whose agent reached the NPWS application, and none of NSW's own rules we read reaches a developer unless it is a provider under contract to the agency.

06What NSW has done and promised

On 24 September, the day the BOCSAR case was made public, the Leader of the Government in the Legislative Council, Penny Sharpe, said in answer to a question that Cyber Security NSW was 'working closely with the Commonwealth agencies to understand exactly what has happened and to identify any vulnerabilities and close those gaps as quickly as possible', and that 'we will provide more information to the House as it becomes available' ³⁵. That is the uncorrected Hansard. NSW answered in Parliament on the day.

Premier Chris Minns said that day that NSW 'will examine' the impact 'both on technology and the vulnerabilities in our confidential information or information that is not public-facing'; no owner or date was given ¹⁵. The ABC reported him as saying Cyber Security NSW would work with Commonwealth intelligence agencies to 'get to the bottom' of the AI involvement with BOCSAR ¹⁵. News24 reported that day, in its own voice, that Minns 'has ordered a review of government systems'; the words it quotes from him say 'will examine' ³⁶. Whether a review has been ordered, who leads it, with what terms and by when, is among the questions put to the Premier's Department below.

In the same Hansard exchange, Greens MLC Abigail Boyd asked 'Will the Government now commit to undertaking a rigorous audit of all government systems and databases'; Sharpe made no audit commitment ³⁵. Boyd's follow-up, asking whether OpenAI told the Government before the Prime Minister called the Premier, has no recorded answer in the uncorrected Hansard ³⁵. Finance Minister Courtney Houssos told the Council 'We have a robust system in place to protect people's data'; asked by Legalise Cannabis MLC Jeremy Buckingham to get the Office of Artificial Intelligence to develop a response, she made no commitment ³⁷. In the take-note debate that day, Labor MLC Dr Sarah Kaine called the delay in notifying the Federal Government of the OpenAI breach 'frankly beyond unacceptable' ³⁸.

On 2 October Boyd said 'We simply cannot trust these companies' ⁹, and the NSW Greens called for the Minns Government to audit all government systems and databases; AAP reported no government reply ⁵. In the ABC's 2 October story the Premier's remarks concern the earlier BOCSAR case; of that case he called OpenAI 'not a malevolent company' ¹.

NSW Parliament next sits on Tuesday 13 October ³⁹. NSW supplementary budget estimates run from 26 to 30 October, and the portfolio committees must report by 24 December; the initial hearings included Minister Sharpe's portfolio on 18 August, before the disclosures ⁴⁰.

07Who decides who is told

On OpenAI's own page, the standard is: 'Under our current security standard we notify organizations when our models bypass their security controls without authorization or impair the availability of their systems or services.' It adds that it is 'also developing a private notice standard for misaligned agent activity', and states no time limit ⁷. It defers to each organisation on 'if and when' to make an incident public ⁷.

The page's standing text says OpenAI has notified 'dozens of third parties'; its 30 September entry says: 'As of September 26, our teams have notified over 100 organizations about activity that met our notification criteria.' Neither is an Australian count, and OpenAI declined to tell The Register which organisations it notified ⁷⁴¹. It says 'We err on the side of notification', and that 'Notification does not mean that any private information was accessed, or that there was a compromise of any third-party system'; most cases found so far 'have been low severity, with limited or no evidence of meaningful impact' ⁷. It says the review 'remains ongoing' and that 'we expect to identify more cases as we work through historical records', that it is dedicating about 7,000 GB200 and GB300 GPUs to it 'at a cost of over half a million dollars a day', and that it has found no other third-party compromise comparable to Hugging Face ⁷.

OpenAI notified AIHW although the activity fell below its threshold, and apologised in writing: 'We also should have handled our response better. We are sorry and working to do better in the future.' ⁶ It is sending its Chief Strategy Officer, Jason Kwon, in person, with 50 minutes scheduled on the committee's program ⁶⁴². It publishes its own failures in detail: its report on a 20 September incident records that a run 'did not stop automatically as expected' and was stopped about 2.5 hours later, and that a retrospective found other external DNS access that was not flagged at the expected severity ⁴³.

Analysis. OpenAI decides whether a case meets its standard; each body decides whether the public hears. No Australian law we found sets either step. The SOCI Act puts its 12-hour and 72-hour reporting clocks on the responsible entity for an asset, and defines a cyber incident to include unauthorised access to computer data or a computer program, without reference to who or what causes it ⁴⁴. In the sections of the Privacy Act's breach scheme we read, the duty sits with the holder of the information, and we found no duty on a third party who caused the access to tell the holder ⁴⁵. PM&C's consultation paper of 17 September proposes that frontier labs granted authorisation to train large-scale AI in Australia disclose 'defined reportable AI incidents' to relevant authorities, with no clock, named authority or penalty; submissions close at 5pm AEDT on Friday 9 October ⁴⁶. The only Australian text we found with a developer clock is the MP Andrew Gee's private member's bill, the AI Kill Switch and Data Centre Control Bill 2026, which as introduced would give a provider of a covered AI system 24 hours to notify a 'critical incident'; it is not law, and its exception for structured testing and narrow definition of a critical incident mean this desk cannot say it would have forced a report here ⁴⁷.

08The questions put

THE RORT is putting the following questions, each with a deadline of 5pm AEDT on Friday 9 October 2026. Any answer will be published in full or summarised fairly, as a dated update to this article.

To the NSW Department of Climate Change, Energy, the Environment and Water: which NPWS web application did the model reach, and what does it hold; when, from whom and by what channel did the department or NPWS first learn of the activity; do the logs of the department or its technology service provider record the June activity, and did any monitoring raise an alert before 1 October; what data did the model obtain, and what are the statement's own words on whether it was public; was the incident reported to Cyber Security NSW through the Cyber Portal, and on what date; has the department assessed it under the Mandatory Notification of Data Breach scheme; and when will the investigation be complete, and will its findings be published.

To the NSW Premier's Department media team: when was the Premier's Office first briefed by OpenAI on the NPWS activity, by whom, and in what form; has a review been ordered, and if so who leads it, with what terms and by when; will the Government commit to the audit of all government systems and databases the NSW Greens called for; did OpenAI tell the Government about the BOCSAR activity before the Prime Minister called the Premier; has the incident changed the Government's engagement with OpenAI; and will the Government update the House when it sits on 13 October.

To Cyber Security NSW, through the Department of Customer Service media unit: when did Cyber Security NSW learn of the NPWS activity, and from whom, and was the 'appropriate NSW Government channel' OpenAI names Cyber Security NSW; did the department and BOCSAR report through the Cyber Portal, and when; has Cyber Security NSW asked agencies to search their logs for activity by AI agents, and over what period; and does any NSW requirement reach an AI developer, with no contract with the agency, whose agent gets into an agency system.

To OpenAI: on what date, and in which time zone, did it first become aware of the NPWS activity, and who or what made it aware; how did the model reach the application; was the NPWS activity identified in the mid-August review or later; on what date and at what time did it notify ASD, and what was the 'appropriate NSW Government channel'; will it publish an incident-page entry on the NPWS activity and on the four bodies named on 28 September; how many of the over 100 organisations it has notified are Australian; and does it accept or dispute Asymmetric Security's findings on the Australian bodies.

OpenAI is listed to appear before the Joint Select Committee on Artificial Intelligence at 2.00pm AEDT on Tuesday 6 October, in the Macquarie Room at NSW Parliament, Sydney ⁴². The program names organisations, not witnesses: that Jason Kwon will appear for OpenAI is OpenAI's own statement ⁶.

Where Parliament has written reporting duties for companies, they are enforced, if slowly. For the frontier AI firms the government is courting, the duty has never been written.

If it's a rort, we cover it.

Update, 7 October 2026. Reference ⁴⁰, which pointed to the NSW Parliament's budget estimates index page, now points to the Legislative Council's Budget Estimates Guide for the 2026-2027 hearings, which states the hearing dates and reporting deadline this article relies on.

Update, 9 October 2026. The replies received to 8 October 2026 are printed here in full, each as the party sent it, and each is followed by what was left out of it. The extracts above are left as published. The NSW Department of Climate Change, Energy, the Environment and Water replied on 6 October 2026, from its media mailbox, to the questions THE RORT sent that day. Its reply reads, in full: 'Thank you for your enquiry.' 'Attached is a copy of the media statement issued by the NSW Government on Friday 2 October 2026. The statement remains current, and there are no further details available at this time.' 'I understand that OpenAI has their own statement, which you would be able to obtain from contacting their press team directly.' It is signed 'Alex', Strategic Policy, Science and Engagement. Left out of that reply: its greeting ('Hi there,'), the department's name, media email address and website lines under the signature, its logo, its acknowledgement of Country, its environmental notice, and the copy of THE RORT's own email quoted at the foot of the message; the department's own sign-off ('Thank you,' 'Alex', Strategic Policy, Science and Engagement) is kept. The NSW Government statement of 2 October 2026 that the department attached, headed 'Statement from NSW Government', reads, in full: 'OpenAI has notified the NSW Government of a misalignment involving an AI agent that accessed public information hosted on a NSW government web application. Current investigations have not identified any unauthorised access to personal information.' 'An OpenAI model accessed a National Parks and Wildlife Service web application containing historical information and data on fires in NSW.' 'The NSW Department of Climate Change, Energy, the Environment and Water (DCCEEW) is working with Cyber Security NSW and its technology service provider to investigate the matter and assess its impact.' 'It's understood the incident occurred in June 2026 and was validated by Open AI and reported through to NSW Government on 1 October 2026.' Left out of the statement: the forwarded-message header (the From, Sent, To, Cc and Subject lines), the 'OFFICIAL' classification marks at its top and foot, the greeting ('Good afternoon media,'), the lead-in line ('Please see the official NSW Government statement regarding a cyber issue involving a government website:'), the two media contact lines at its foot, the sign-off ('Regards,'), the Premier's Department media signature with its telephone number, email address, website and street address, and its acknowledgement of Country and environmental notice. The Victorian Department of Health replied on 6 October 2026, from its press office. Its reply has two parts. Under the heading 'Quotes attributable to the Department of Health' it reads, in full: 'The Department of Health became aware of this issue on 10 September 2026 after being contacted by OpenAI by email and immediately activated its incident response processes.' 'The issue was remediated the same day. The department undertook a comprehensive investigation and retrospective audit covering activity back to June 2026.' 'That review found no evidence that sensitive, confidential, personal, health or patient information was accessed, and no information security breach was identified.' 'The department will continue to work with relevant federal counterparts, including the National Cyber Security Coordinator, and monitor for any further information or required action.' The department gave further points on background, which THE RORT has not published. Left out of its reply: the greeting ('Hi there,'), the lead-in line ('Please find our response below:'), the 'OFFICIAL' classification mark, the copy of THE RORT's own email of 2 October 2026 quoted at the foot of the message with the department's caution notice above it, and its confidentiality and protective-marking notices; the two points the department gave under the heading 'On background' are also left out, because they are not published. The NSW Bureau of Crime Statistics and Research replied on 7 October 2026, in an email from its Executive Director, Jackie Fitzgerald. The email reads, in full: 'The OpenAI notification of 18 September was directed to the Crime Mapping Tool vendor. BOCSAR first received a Cyber Notification email from the ASD on Monday 21 September 2026. This was the first correspondence that BOCSAR received on this issue.' 'While investigations continue, at the time of writing it is still the case that there is no evidence that any data has been accessed that cannot already be accessed through the public web-based Crime Mapping Tool. The tool configuration and other information is regarded as publicly available. It is also still the case that no structural vulnerability has been identified nor any fixes needed to improve security of the Crime Mapping Tool. The OpenAI statement has not changed this finding.' 'BOCSAR takes the security of its data and any potential data breach extremely seriously. In this case, the datafile contained no personal information, and investigations have not identified any unauthorised access to data or any vulnerability requiring remediation. However, cyber threats continue to evolve and organisations must be alert to new and emerging risks. As NSW's crime and justice data agency, we maintain a strong security framework and continually review our systems, controls and practices to ensure the data entrusted to us remains protected.' Left out of the email: the greeting ('Hi there RORT people,'), the sign-off ('Thanks,' 'Jackie'), the signature block with the Executive Director's telephone number, email address and postal addresses and the Bureau's website address, its logo and acknowledgement of Country, its disclaimer, and the copy of THE RORT's own email of 6 October 2026 quoted at the foot of the message. Any further answer to these questions will be added here.

Update, 9 October 2026. The questions of 6 October 2026 to the parties below asked for a response by 5pm AEDT on Friday 9 October 2026. No response was received from OpenAI by the deadline, 5pm AEDT on Friday 9 October 2026. No response was received from Cyber Security NSW by the deadline, 5pm AEDT on Friday 9 October 2026. The NSW Department of Climate Change, Energy, the Environment and Water replied on 9 October 2026, from its media mailbox, to THE RORT's follow-up questions of 6 October 2026, which asked whether the department would answer the parts of its first questions that its statement did not cover. Its reply reads, in full: 'Thanks for your follow-up questions. Just confirming our response is the statement previously provided.' Left out of that reply: its greeting ('Hi Rort team,'), its sign-off and signature block with the sender's name, title, department, telephone numbers, email address, website and working hours, its logo, its acknowledgement of Country and environmental notice, and the copy of THE RORT's own email of 6 October 2026 quoted at the foot of the message. The reply gives no answer to those questions beyond that sentence. THE RORT asked the Victorian Department of Health, in questions 2 and 3 of its email of 6 October 2026, which repeated its email of 2 October 2026, about the access key and about any report to the National Cyber Security Coordinator, ASD or another body, and asked BOCSAR, in its email of 2 October 2026, whether BOCSAR itself reported the matter to ASD or any other body, for a response by 5pm AEDT on Thursday 8 October 2026. No response was received from the Victorian Department of Health by the deadline, 5pm AEDT on Thursday 8 October 2026. No response was received from BOCSAR by the deadline, 5pm AEDT on Thursday 8 October 2026. No further reply was received from BOCSAR to its further questions of 6 October 2026, on the records for 21 June and on the Cyber Portal 24-hour report, by the deadline, 5pm AEDT on Friday 9 October 2026; its reply of 7 October 2026 is printed above. No further reply was received from the Victorian Department of Health to the questions of 6 October 2026 that were due by 5pm AEDT on Friday 9 October 2026. A later email of 6 October 2026, sent after the department's reply, put two new questions, numbered 1 and 4 in that email, with a reply date of 5pm AEDT on Monday 12 October 2026; they remain open. A new question to BOCSAR, numbered 3 in THE RORT's email of 8 October 2026, is due by 5pm AEDT on Wednesday 14 October 2026; it remains open. THE RORT's questions to the NSW Premier's Department go through its web form; the date they are put will be added here as a dated update. Any further answer will be added here.