Back to News
SecurityAI Understanding briefing

Sydney teen used ChatGPT to plan terror attack, court hears

A 16-year-old pleaded guilty to planning a terrorist attack in Sydney, telling the court he used ChatGPT to research security details and contact a bomber, while being radicalized via TikTok and Telegram.

5 min readRead the original reporting
Source-provided image accompanying Sydney teen used ChatGPT to plan terror attack, court hears
Attributed reportingSource recorded
Publisher
theguardian.com
Source type
Reporting by a news outlet — not a first-party document.

What we could not confirm independently: This claim is attributed to the named outlet. We did not verify it against a first-party document. (theguardian.com)

ContextUnderstand this in 60 seconds

Key terms

Generative AI
AI systems that produce new content such as text, images, audio, video, or code.
Pipeline
An ordered workflow of preprocessing, model steps, and postprocessing stages.
Test yourselfAI Ethics Quiz

What happened

The New South Wales Supreme Court sentenced a 16-year-old, identified as RK, to a three-year community corrections order after he pleaded guilty to planning a terrorist act in 2024. The court heard that RK, who was 14 at the time, used ChatGPT to research the Sydney Opera House's security arrangements and to gather information about Dzhokhar Tsarnaev, the Boston Marathon bomber. RK also used Telegram to seek instructions for making a pressure cooker bomb and attempted to contact Tsarnaev via email. The judge noted that while RK was radicalized online, he had not obtained materials for bomb-making and had no concrete plan for execution.

In a sentencing hearing in the New South Wales Supreme Court, Justice Stephen Campbell addressed the case of RK, a 16-year-old who pleaded guilty to acts in preparation for a terrorist act. The offending occurred in 2024 when RK was 14. The court accepted that RK was radicalized through a progression of online content, starting with historical and political themes on TikTok, moving to religious extremism, and finally to violent content on YouTube and Telegram.

RK used ChatGPT as a research tool during this period. According to the court, he asked the AI about security arrangements at the Sydney Opera House, a location he had identified as a potential target. He also used the chatbot to obtain information about Dzhokhar Tsarnaev, including whether inmates had access to news. RK attempted to contact Tsarnaev by emailing the prison using a publicly available address, though he never made contact.

On Telegram, RK sought instructions for creating a pressure cooker bomb and shared Islamic State videos with others to seek validation. The judge noted that RK exhibited a 'complete lack of understanding of the import of his conduct' in these actions. Despite these steps, the court found that RK had not obtained any material for bomb-making and lacked a concrete plan for committing an act of violence.

The court ordered a three-year community corrections order rather than jail time. Justice Campbell stated that RK had genuinely renounced his adherence to violent extremism and had undergone six sessions of religious and ethical training with a Muslim cleric. The judge described the radicalization as 'incipient and hesitant' and noted that the deradicalization process was well advanced.

Source details: theguardian.com

Why it matters

This case highlights the emerging role of in the operational planning stages of terrorism, moving beyond mere propaganda consumption to active logistical research. The use of ChatGPT to query security vulnerabilities and inmate access details demonstrates a practical, albeit unsuccessful, application of AI tools in criminal intent. It underscores the difficulty for security agencies in distinguishing between harmless curiosity and actionable threat preparation when AI tools are involved. The ruling also reflects a judicial approach that prioritizes deradicalization and community correction for young offenders who have renounced extremist views, balancing public safety with rehabilitation. This incident provides a concrete data point for policymakers and AI developers regarding the potential misuse of large language models for security reconnaissance.

The case is significant because it documents a specific instance where a model was used to facilitate the planning phase of a terrorist act. While the attack was not carried out, the use of ChatGPT to probe security details and gather intelligence on a known terrorist indicates a shift in how AI tools might be exploited for criminal purposes. This moves beyond the common narrative of AI being used for propaganda generation to its use in logistical and strategic planning.

The ruling highlights the challenges faced by law enforcement and AI companies in monitoring and mitigating such misuse. The judge's comments on RK's lack of understanding of the consequences suggest that the barrier to entry for using AI in such contexts is low, potentially lowering the threshold for individuals with extremist ideologies to move from ideation to planning. This has implications for the design of safety filters and content moderation policies in AI systems.

Furthermore, the case illustrates the complex intersection of youth radicalization, online algorithms, and AI tools. The testimony from ASIO regarding the role of algorithms in tightening feeds to radical content, combined with the use of AI for specific queries, paints a picture of a multi-platform radicalization . This has broader implications for how society and technology companies address the safety of young users online.

Interactive Mechanism

Interactive Mechanism: How It Actually Works

Explore the underlying technology behind this development interactively.

System Requirements:
Best ArchitecturePure RAGRecommended pattern
Hallucination RiskVery LowGrounding efficacy
Update Cost$0 (Vector sync)Ongoing maintenance
Core takeaway: Fine-tuning teaches models how to speak (form, style, syntax); RAG teaches models what to say (verifiable facts). Never use fine-tuning alone for factual memory.
Interactive Concept Check+10 Points
AI Ethics Quiz

Why can ethical evaluation not be reduced to one model score?

What to watch next

Monitor for further legal precedents involving AI use in criminal planning, particularly regarding how courts assess the intent and capability of defendants who utilize LLMs for research. Watch for regulatory responses from AI providers like OpenAI regarding safety filters for queries related to security vulnerabilities or violent actors. Additionally, observe whether security agencies update their threat assessment frameworks to specifically account for AI-assisted reconnaissance in youth radicalization cases.

Legal professionals and policymakers should watch for how this case is cited in future proceedings involving AI-assisted criminal planning. The specific findings regarding the use of ChatGPT for security research may set a precedent for how such actions are classified and punished.

AI developers and safety researchers should monitor this case as a real-world example of potential misuse. It may inform the development of more robust safety measures to detect and block queries related to security vulnerabilities, bomb-making, or contact with known terrorists.

Security agencies may update their threat detection models to include indicators of AI-assisted planning, such as specific patterns of queries to LLMs or the use of AI to verify information obtained from other sources. This could lead to new guidelines for monitoring online activity related to terrorism.

Related guides & quizzes

Found this useful?