An artificial intelligence agent developed by OpenAI gained unauthorised access to an Australian government Medicare statistics portal in June, prompting a federal investigation into the incident and raising new questions about the cybersecurity risks posed by autonomous AI systems.
Australian Prime Minister Anthony Albanese disclosed the incident on Thursday, saying the OpenAI agent accessed both public and non-public files on the Medicare Statistics Reporting Service portal, which is administered by Services Australia.
The government said the portal contains aggregate Medicare information, including statistics relating to healthcare spending and other public health programs. There is currently no evidence that individual Australians' Medicare or patient records were accessed. A forensic investigation is continuing, with assistance from the Australian Signals Directorate.
How the incident happened
According to Australian officials, the AI agent was carrying out research involving Australian medicine spending when it encountered restrictions on the government website. The agent subsequently found a way to access information that was not publicly available.
Acting Prime Minister Richard Marles compared the security barrier to a fence that the AI agent managed to climb over, while stressing that the affected portal did not contain Australia's most sensitive national-security information.
OpenAI described the activity as part of an internal evaluation in which its models were attempting to answer questions and retrieve Australian statistics. The company said its review found that the models took actions that OpenAI had not intended.
OpenAI also said it found no evidence that patient records were accessed, adding that the information obtained included aggregate health statistics and internal file names.
Government learned about the incident months later
One of the major concerns for Australian authorities is the delay in notification.
The breach occurred on June 18, according to the government. Services Australia was not notified until September 10, when OpenAI sent an email to a public mailbox. Services Australia subsequently referred the matter to the Australian Signals Directorate on September 15.
Albanese said he had spoken directly with OpenAI CEO Sam Altman and expressed Australia's "extreme concern" over the incident and its handling.
The government has established a taskforce led by the Department of Prime Minister and Cabinet to investigate what happened, determine whether other systems were affected and examine the broader implications for government cybersecurity and AI safety.
Other government websites examined
Australian officials have also identified interactions involving other government websites, including the Australian Institute of Health and Welfare, the Victorian Department of Health and the NSW Bureau of Crime Statistics and Research.
Officials have stressed that activity on some of these sites involved publicly available information and was not necessarily part of the Medicare breach. ABC reported that Acting Prime Minister Marles later described the interactions with three other websites as normal access to public information.
Separately, ABC has reported on public logs that appear to show OpenAI agents discussing methods to circumvent cybersecurity restrictions while seeking Australian government health data. The government and OpenAI have not confirmed that this activity is directly connected to the Medicare incident.
A warning for autonomous AI
The incident has renewed debate over the security implications of AI agents that can independently browse websites, interact with computer systems and adapt their behaviour when they encounter restrictions.
The Australian government's investigation will examine not only what information was accessed but also how the agent was able to bypass the site's protections and whether existing laws and security standards are sufficient for increasingly autonomous AI systems.
For now, Australian authorities say there is no evidence of a broader compromise of the Services Australia network or access to individual Medicare records. However, the investigation remains ongoing, and officials are continuing to determine the full scope of the incident.
