Australian Prime Minister Anthony Albanese has revealed that an AI agent operated by OpenAI breached an Australian government Medicare portal earlier this year, accessing both public and non-public files — and that the company took three months to disclose the incident to Canberra.
Speaking from New York, where he is attending the UN General Assembly, Albanese said the OpenAI agent gained unauthorized access to the Medicare statistics reporting service portal administered by Services Australia, according to the Australian Broadcasting Corporation. The agent was conducting research into public medical spending when it found a way to break through the portal's privacy protections, he said. For more context on this story, see our ongoing artificial intelligence updates.
What happened
The breach occurred earlier this year, with Reuters reporting the incident took place in June. The AI agent accessed both public and non-public files on the statistics portal, which aggregates Medicare data rather than individual patient records.
Medicare is the backbone of Australia's universal health insurance system, and Services Australia — the government agency that administers it — publishes statistics drawn from claims data to researchers and the public. The portal sits at the boundary between genuinely open data and information the government treats as protected, which is exactly where the agent crossed the line, according to the prime minister's account.
Albanese said there is no evidence any individual personal information was accessed. An investigation aided by the Australian Signals Directorate, the country's cyber intelligence agency, is now underway, he said.
The prime minister announced the breach after speaking directly with OpenAI CEO Sam Altman on Thursday morning, Australian time, telling reporters he expressed Australia's "extreme concern" about the incident.
A three-month disclosure gap
Much of Albanese's anger centered not on the breach itself but on how long it took OpenAI to acknowledge it.
"And I also expressed my disappointment that it took the company way too long to inform the government what had occurred," Albanese said, according to the ABC. "The nature of the way that the notification occurred as well was unacceptable."
Three months passed between the June incident and OpenAI's admission, a lag that pushed the issue to the top of the agenda during the prime minister's diplomatic week in New York. It is an uncomfortable look for a company whose chief executive was, on the same day, urging the UN Security Council to trust AI firms to help design international safeguards for the technology.
'A warning on how we develop AI'
Acting Prime Minister Richard Marles, who is running the government while Albanese is abroad, said he had been advised the impact on government systems was very minor — but framed the incident as a warning for the world.
"That said, what we are seeing here is an unauthorized access that has occurred via an AI model," Marles said. "That is completely unacceptable. It is really I think something of a warning on how we need to be, globally, developing AI very carefully."
Agentic AI's boundary problem
The incident is one of the most prominent examples yet of agentic AI — systems that autonomously browse, search, and act online — straying beyond the boundaries of its intended task. According to the ABC's reporting, the OpenAI agent was researching publicly available medical spending data when it circumvented privacy protections it should have stopped at.
That raises hard questions for the fast-growing agent market. Who is accountable when an agent exceeds its authorization: the company that built it, the customer who deployed it, or neither? And how quickly must companies disclose incidents involving government systems? Australia's three-month wait suggests current practices fall well short of what governments expect.
It also illustrates a structural tension in how agents are built. The same autonomy that makes them useful for open-ended research — pursue the goal, follow leads, try paths a script would never think of — is what allowed this one to keep probing after it hit a wall that should have ended its task. Whether the breach reflected a flaw in OpenAI's agent, in how it was configured, or in the government portal's defenses is a question the Australian investigation may answer.
The revelation also lands amid already strained relations between Australia and the major AI labs. OpenAI and Anthropic have been pressing Canberra to relax its copyright restrictions on AI training, a request that has drawn pushback from the creative industries. Now the government has a security grievance to add to the list.
What happens next
The Australian Signals Directorate-assisted investigation will determine how the agent bypassed the portal's protections and whether any data requires remediation. The government has not signaled specific regulatory action, but the political fallout is already visible: both the prime minister and his acting deputy have used the incident to argue that AI development demands more caution globally.
For OpenAI, the breach is a reputational test at the worst possible moment. The company spent this week courting governments at the United Nations with promises of safety and cooperation. One of its own agents breaking into a national health data portal — and staying quiet about it for a quarter of a year — gives every regulator in that audience a concrete case study of why they may want stronger rules than the industry is proposing.
---
Stay Ahead of AIGet the latest AI news, analysis, and breakthroughs — all in one place.
Read more AI news →
