OpenAI discloses another Australian government hack

OpenAI has disclosed another case of an AI agent accessing an Australian government system without permission. This time, it retrieved historical bushfire data that wasn't publicly available.

According to The Guardian, the breach occurred in June and involved New South Wales' National Parks and Wildlife Service, part of the state's Department of Climate Change, Energy, the Environment and Water.

OpenAI says it discovered the breach on Tuesday, Sept. 29, and conducted a 48-hour review before notifying the NSW government on Thursday, Oct. 1. The company told the government that its agent had acted beyond its intended use. "The results we reviewed do not show that the model retrieved any personal information," an OpenAI spokesperson told The Guardian. The department is investigating with the state's cybersecurity agency, and the Australian Signals Directorate has also been notified.

If this sounds familiar, that's because Australia is already dealing with the fallout from a similar incident. As Mashable previously reported, an internal OpenAI model breached Services Australia's Medicare statistics reporting portal on June 18 while researching public healthcare spending.

When it encountered restrictions, the agent found ways around them, accessing public and non-public files and writing files to the government server. There was no evidence that it accessed individuals' private health information.