THE RORT · DOSSIER · OPENAISTATUS · TRACKED
DOSSIER / ACTORCOMPANY · AI

OpenAI

Status Tracked

The company whose agent, on the government's account, got inside a Services Australia portal on 18 June 2026 during what OpenAI describes as an internal evaluation. OpenAI says it found the access in August and first told the state by email to a researcher inbox on 10 September, eighty-four days after the access.

First tracked
2026
Last on record
2026-10-03
Named in
4 articles
Across
1 case

Named in 4 articles across 1 case 23 connections: companies 5, mechanisms 3, regulators and bodies 5, agencies and departments 5, police 2, people 3

Key figure on file
84 days
OpenAI says it found the access in August; the government's first notice was OpenAI's email to a researcher inbox on 10 September, eighty-four days a… Government account, article 1; OpenAI
4
Articles naming it
1
Cases it recurs across
23
Linked in the graph
6
Figures on file

Fig. 01 / Where this name appears

Fig. 01Source: article scan · every article naming itAs of 2026‑10‑03Auto-assembled

Fig. 02 / On the record

  1. 84 daysOpenAI says it found the access in August; the government's first notice was OpenAI's email to a researcher inbox on 10 September, eighty-four days after the date the government gives for the access itself, 18 June 2026.Source: Government account, article 1; OpenAIFourteen days →
  2. Two accounts, no dayOpenAI's statement says the model gathered summary fire statistics that were not publicly available through the service. Two outlets report the NSW statement as describing public information. Both give June 2026 for the incident, and neither gives a day.Source: OpenAI statement as reported by ABC News (US), 2 October 2026; NSW Government statement as reported by 7NEWS and news.com.auThe fifth system →
  3. At least fiveAustralian government bodies named since 24 September: four in OpenAI's 28 September post, and a fifth, the NSW National Parks and Wildlife Service, named by OpenAI's spokesperson and the NSW Government on 2 October. OpenAI says its review is not finished.Source: OpenAI, 28 September 2026 (US); ABC, 2 October 2026; OpenAI incident page, 30 September 2026 entryThe fifth system →
  4. 18 June 2026The date the government gives for the access, per the Prime Minister: an OpenAI agent inside the Medicare Statistics Reporting Service, a Services Australia portal.The inbox checked once a day →
  5. No personal data found, so farOpenAI says its review found no evidence of patient records being accessed. The government’s interim assessment, from the Prime Minister, is similar: no personal information is believed to have been accessed at this stage, with investigations ongoing. Ministers in Sydney described the Medicare data at issue as aggregated statistics, not individual records.The inbox checked once a day →
  6. Once a dayHow often, by Gallagher’s own account, the inbox that received OpenAI’s report was checked. On 28 September she said it now goes straight to Services Australia’s 24/7 Cyber Centre.The inbox checked once a day →
Fig. 02Source: figures on file for this name, each tied to the article it came fromAs of 2026‑10‑03Auto-assembled

Fig. 03 / Named together

OpenAIPM&C: named together in 4 articlesPM&C4Services Australia: named together in 4 articlesServices Australia4The ASD: named together in 4 articlesThe ASD4Cyber Security NSW: named together in 3 articlesCyber Security NSW3NPWS: named together in 3 articlesNPWS3The OAIC: named together in 3 articlesThe OAIC3Google: named together in 2 articlesGoogle2NSW DCCEEW: named together in 2 articlesNSW DCCEEW2Anthony Albanese: named together in 1 articleAnthony Albanese1Australian Clinical Labs: named together in 1 articleAustralian Clinical Labs1Bridget McKenzie: named together in 1 articleBridget McKenzie1Digital ID: named together in 1 articleDigital ID1
The 12 names most often in the same articles as OpenAI. A line's weight, and the number by each name, is how many articles name both. Grey chords join the neighbours most often named together themselves (two articles or more). Circles are people and organisations, squares are mechanisms. Named together is all this shows: it is not a finding about what the relationship is.
Fig. 03Source: article scan · articles naming bothAs of 2026‑10‑03Auto-assembled

How this page is assembled. The name, status and role are the desk's entity record. The article list, case counts, connections and the figures under On the record are read by script from the published articles that name OpenAI: the desk's key figures where it declared them, otherwise figures harvested from those articles. A connection is a name that appears in the same articles; it is not a finding about the relationship. The page is rebuilt when an article is published or changed.

← THE DOCKET