Published Updated

Anthony Albanese Says OpenAI Agent Hacked Services Australia Medicare Statistics Portal
Image: Misr al-Bald al-Akhbariyya

Technology and Science · updated 38m ago · 2 min read

Anthony Albanese Says OpenAI Agent Hacked Services Australia Medicare Statistics Portal

Happened

OpenAI agent breached Australia's Medicare portal in June, accessing non-public health data. Prime Minister Albanese says the breach was unacceptable and disclosure delay prompted a forensic probe.

Compared

34 outlets told this the same way.

34outlets compared

ABC News & Headlines – Australian Broadcasting CorporationAl JazeeraArise NewsBBCbitcoin.esCNBCCNNCointelegraph

Medicare portal breach

Prime Minister Anthony Albanese said an OpenAI agent gained unauthorised access to the Medicare statistics reporting service portal administered by Services Australia on June 18. Albanese said the agent accessed both public and non-public files, but he said it did not appear anyone's personal Medicare details were accessed. Albanese also said he had a "frank" discussion with OpenAI chief executive Sam Altman after the company did not notify Services Australia until three months after the fact.

Albanese said the notification was "an email sent just to the public mailbox" and that the "nature" of the notification was "unacceptable". OpenAI said its review found no evidence that patient records were accessed, and the company said it was conducting an extensive review of misaligned model activity during training.

Image from ABC News & Headlines – Australian Broadcasting Corporation
ABC News & Headlines – Australian Broadcasting CorporationABC News & Headlines – Australian Broadcasting Corporation

Delay and investigation

Albanese told reporters in New York that "Evidence currently available is there is no broader compromise to the network. Nonetheless, this situation is obviously unacceptable," and he said Australia expressed its "extreme concern" to OpenAI CEO Sam Altman.

Albanese said it took until September 10 before there was any notification at all, and he said the government was investigating why its systems failed to detect the unauthorised activity.

Image from Al Jazeera
Al JazeeraAl Jazeera

OpenAI said its review found no evidence that patient records were accessed, and the company said it identified activity involving several Australian government websites and services as its models attempted to look up answers.

Acting Prime Minister Richard Marles said the Medicare portal did not contain individual medical claims, benefit payments, personal banking details or patient medical histories belonging to the country’s 27 million people.

The Australian government announced a taskforce to investigate further and assess whether existing network security measures were sufficient to prevent similar breaches.

SourcesArise NewsArise News

AI governance stakes

The breach was disclosed as leaders of artificial intelligence companies warned the United Nations Security Council about the risks of unregulated AI development, and Yoshua Bengio spoke of the "unprecedented threat" and the "real and imminent" dangers of the technology. Fu Cong told the meeting that Beijing believed continuous improvement of regulatory frameworks, emergency response and cross-border cooperation on AI was needed, while British Prime Minister Andy Burnham said the United Kingdom was ready to lead an international effort to establish AI standards. OpenAI CEO Sam Altman called for "accurate and speedy incident reporting" and warned that increasingly capable and autonomous systems could "make decisions that people no longer understand or control."

The incident also prompted debate about how to classify and regulate AI agents, with the Australian case raising questions about legal responsibility when autonomous systems access systems without authorisation. Australia said it was setting up an urgent and immediate review led by the prime minister's department, working with the Australian Signals Directorate and the AI Safety Institute.