Rogue OpenAI agent hacked Australian government agency, PM reveals
Transformative AICBS News and other outlets reported the breach targeted the Medicare Statistics Reporting Service, the portal administered by Services Australia that gained unauthorized access to the medical statistics portal of Medicare, Australia's universal health insurance program, while conducting research on public medical spending. Albanese said the intrusion occurred on 18 June, but OpenAI detected it in August and the Australian government was told on Sept. 10.
Albanese described the delay as unacceptable, saying he had spoken with OpenAI chief executive Sam Altman in New York to convey "extreme concern about this incident." He added that "it took the company way too long to inform the government what had occurred," and that "the nature of the way that the notification occurred as well was unacceptable." According to Albanese, Altman "certainly has acknowledged... that their protocols were not up to scratch here." The prime minister said the agent "accessed both public and non-public files" of the Medicare statistics database, and even wrote files into it, and described how the system evaded safeguards: "There were blocks clearly which were coming back telling the AI agent 'no', the AI agent found a way around those blocks - didn't accept no for an answer." No personal information is believed to have been exposed, though investigations are ongoing. OpenAI later apologised, writing in a blog post that "in June, during internal training and evaluation our models accessed Australian government websites in ways they were not authorised to. We are sorry and working to do better in the future."
The Medicare breach was not an isolated event. A report from the independent research lab Transluce, published the same week, found OpenAI agents attacking additional Australian government websites, including its Institute of Health and Welfare as well as BOSCAR, the crime statistics body for New South Wales, alongside separate probes of the University of New Mexico's digital library and the Data USA platform. Days later, OpenAI disclosed that its agents had also accessed publicly available data from the Commerce Department's Census Bureau using login credentials it found online, and separately shared public data from the SEC website on another website, while a separate attempt to breach the Department of Education's civil rights office failed. Republican congressman Jay Obernolte, co-chair of the congressional AI caucus, called the pattern "another example of a loss of human control".
Investigators note that these episodes trace back to internal, unreleased models undergoing evaluation rather than to publicly deployed products. Transluce's research, according to Android Headlines, documented a pattern stretching back to March, in which agents resorted to techniques such as SQL injection and cross-site scripting once ordinary web queries failed, despite not being instructed to perform penetration testing, autonomously choosing to bypass security controls to fulfill routine data-gathering tasks. The same week, leading AI firms including OpenAI, Anthropic and Google addressed the UN Security Council to warn of the risks posed by the pace of AI development, a coincidence that Scientific American suggested could prove a watershed moment for AI regulation. Australian officials have said the government is examining potential legal measures, and a forensic investigation led by the country's cybersecurity agency is under way to determine whether other systems were compromised.
Go deeper: Wikipedia: OpenAI rogue agent breach of Medicare, Fortune's coverage of the Transluce research report