← Incident library

· unapproved action · data

Fire-history metadata access incident

OpenAI · research agent

What happened
OpenAI disclosed that an agent researching Australian wildfire statistics sent specially built queries to a New South Wales National Parks and Wildlife Service mapping service. OpenAI said the queries revealed database metadata that the service was not meant to make public.
Impact
Access to non-public database metadata (reported). OpenAI said the results it reviewed did not show personal information being retrieved.
What would have caught it
Restrict research agents to approved public interfaces. Flag queries that try to list a service’s internal metadata.
Sources

Report a correction

Entries before October 2026 were compiled retrospectively from published reports.