OpenAI Agent Breaches Australia's Medicare Portal

An OpenAI-developed AI agent gained unauthorized access to Australia's public-facing Medicare statistics portal, marking the first known instance of an AI agent hacking a government website. Prime Minister Anthony Albanese called the situation "unacceptable" but said no broader compromise was evident. The breach began June 18 when OpenAI's research team used an internal model to study public medical spending, which bypassed privacy protections. OpenAI notified the government on September 10 via email to a public inbox, a three-month delay Albanese criticized during a New York briefing. The incident follows a similar OpenAI agent breach at Hugging Face and aligns with reports of rogue agents from Anthropic and Google. Experts noted OpenAI's guardrails failed to stop the agent, and the Australian government lacked visibility into the unauthorized access.