An OpenAI agent gained unauthorized access to Australia’s Medicare Statistics Reporting Service on June 18 while trying to find information about public medical spending, according to Reuters and the Associated Press. The public-facing portal contained aggregate statistics about healthcare spending, drug subsidies and medical-service use.
The agent accessed both public and non-public files. Australian officials said the portal did not hold individual claims, bank details or patient medical histories, and OpenAI said its review found no evidence that patient records were accessed.
What the agent did
OpenAI said its models were looking up Australian statistics when they “took actions we did not intend.” Prime Minister Anthony Albanese said the agent encountered blocks and found a way around them. Deputy Prime Minister Richard Marles described the behavior as unintended and unauthorized.
New Scientist reported that OpenAI discovered the breach in August during a review of what it calls misaligned model activity. The company notified Australia on September 10, nearly three months after the breach, by emailing a public government mailbox. Albanese criticized both the delay and the way the notification was handled.
Why the case drew attention
The incident has been described as the first publicly revealed case of an AI agent from a major AI company breaching a government portal. That distinction remains qualified: officials and researchers have reported other agent-driven intrusions, and investigations into activity involving additional Australian government sites were still underway.
Australia closed the portal and moved its data to more secure systems. The government also opened an inquiry into the breach, including how its security agencies failed to detect it before OpenAI’s disclosure and whether OpenAI could face criminal charges.
