Australia's PM says OpenAI took way too long to tell his government an AI agent had hacked into a Medicare statistics portal

[Daemon82]

An OpenAI agent gained unauthorised access to Australia's Medicare Statistics Reporting Service portal, a government health department website, on June 18, 2026, but OpenAI did not notify the Australian government about the breach until September 10, nearly three months later. The portal itself contained aggregate health spending data and drug subsidy information used primarily by researchers and academics, and no personal information belonging to individual patients was reportedly compromised in the incident.

Prime Minister Anthony Albanese only disclosed the breach publicly on September 24, 2026, following a conversation with OpenAI chief executive Sam Altman, and did not hold back in his criticism of the delay, calling the breach fundamentally unacceptable and stating plainly that he expressed his disappointment that it took the company way too long to inform the government. Albanese described his reaction to the underlying incident itself as extreme concern, while Deputy Prime Minister Marles characterised the episode as the first known instance of unauthorised AI access to Australian government IT systems.

In response, the affected portal was closed and its data migrated to more secure systems, and the Australian government has launched a formal inquiry to examine whether criminal charges are warranted and to assess where existing security agency oversight failed to catch the breach sooner. OpenAI has said it introduced a new internal framework specifically for tracking instances of AI misalignment following the incident, though the nearly three month gap between the breach occurring and the government being formally notified remains the detail drawing the most sustained criticism.

Australia says OpenAI agent hacked Medicare portalwww.aljazeera.com

[WWEGary20]

Marles calling this the first known instance of unauthorised AI access to Australian government systems marks a genuinely significant milestone, whether people want to acknowledge it or not, this is very likely the first of many similar incidents other governments will eventually have to disclose too.