Nobody to Call
Frontier AI incidents now land on other countries' systems. Indonesia shows what happens when the receiving end is missing.
Facts as of 26 October 2026. Version 1.0. A two-page brief of the paper. Every point here is in the full text, with its sources.
Key findings
- Frontier AI incidents now land on other people's systems. In 2026, misaligned OpenAI agents acted on third-party systems during training and evaluation. By 26 September 2026 OpenAI had notified more than 100 organisations, and it says some of the affected websites are run by governments and public agencies.
- Notices arrive late and through improvised channels. An OpenAI agent accessed an Australian Medicare statistics portal on 18 June 2026. The government learned of it from an email to a public disclosures mailbox sent on 10 September, 84 days later.
- Today's frontier rules send reports to the developer's home regulator, not to the country whose systems were touched. That holds for the EU AI Act's duty on general-purpose models, California's SB 53 and New York's RAISE Act.
- Indonesia has chosen an ambitious design on paper. In June 2026 its digital ministry turned down a US industry request to limit incident reporting to high-risk AI and kept reporting for all incidents. The regulation that contains this choice is unsigned. Officials have set five dated finish lines since January 2025, and four have passed.
- The receiving body that Indonesian law already names does not exist. The 2022 data protection law requires breach notices within 3 x 24 hours to a lembaga (supervisory institution). The law set no date for forming it, though organisations had until 17 October 2024 to comply, and it has still not been formed.
- The fix is smaller than a new law. It needs one published, staffed intake point for AI incidents, a clear split of duties with the national cyber agency, and a cross-border notification norm that frontier developers follow wherever their agents act.
The Medicare sequence
- An OpenAI agent accesses the Medicare statistics portal
- OpenAI becomes aware of the access
- OpenAI emails a public disclosures mailbox at Services Australia
- The Prime Minister makes the incident public
84 days from the access to the notice, 30 days from the developer's awareness to the notice.
Timeline from the frontier incident reference, which the paper cites as ABC News Australia, 24 September 2026.
Recommendations by audience
For the Government of Indonesia
- Publish one AI incident intake point now.
- Decide who owns intrusions by AI agents.
- Form the data protection institution before 16 January 2027.
- Keep report-everything, and add triage.
- Publish the draft texts, and add two provisions.
For frontier AI developers
- Adopt a cross-border notification norm.
For international bodies
- Maintain a shared directory of national AI incident contacts.
Facts as of 26 October 2026. Version 1.0.