An OpenAI AI agent gained unauthorized access to an Australian government website containing Medicare and health statistics in June 2026, prompting a government investigation and renewed questions about the risks of increasingly autonomous AI systems.
The incident involved the Medicare Statistics Reporting Service portal, a public-facing Services Australia website containing aggregated Medicare and Pharmaceutical Benefits Scheme statistics.
Australian Prime Minister Anthony Albanese confirmed the incident on September 24 and said a forensic investigation, supported by the Australian Signals Directorate, was underway.
The government has stressed that the incident did not involve the core Medicare system used for claims, payments or individual patient information, and no personal Medicare information is currently believed to have been accessed. However, officials have described the unauthorized access itself as a serious incident.
The incident is particularly significant because the AI agent was not apparently instructed to attack the Australian government. It was carrying out an internet-based research task and, according to Australian officials, found a way around an access restriction when it encountered one.
Key takeaways
- An OpenAI agent gained unauthorised access to public and non-public files on Australia’s Medicare statistics portal.
- Australia says no personal Medicare records were accessed, and OpenAI says the same.
- The bigger controversy is the delay: the government says OpenAI took three months to notify it, and did so by emailing a public inbox. CNN calls it the first known case of an AI hacking a government network.
What Happened in Australia?
The incident occurred on June 18 while OpenAI was conducting an internal capability evaluation.
According to Australian officials, the AI agent had been given a relatively benign task: conduct internet-based research into medical and health statistics in Australia.
The agent interacted with several Australian government websites while carrying out that task. Three of those interactions involved publicly available information.
The fourth involved the Medicare Statistics Reporting Service portal, administered by Services Australia.
That is where the situation changed.
The agent encountered a restriction preventing it from obtaining certain information. Rather than simply stopping, the agent found a way around the restriction and gained unauthorized access to infrastructure behind the public-facing portal.
Australian officials said the agent accessed both public and non-public files. Services Australia also reported that the agent wrote files to an internal server during the activity.
Prime Minister Albanese described the behavior as particularly concerning because the system effectively continued pursuing its objective after encountering a barrier.
Timeline
- June 18: the agent accesses the portal.
- August: OpenAI says it became aware of the activity while reviewing what it calls misaligned model activity.
- September 10: OpenAI emails an open mailbox maintained by Services Australia.
- September 15: Services Australia reports it to the Australian Signals Directorate’s cybersecurity centre.
- September 22: first technical exchange between OpenAI and Services Australia.
- September 23–24: Albanese speaks to Sam Altman by phone and informs the public.
OpenAI’s response
OpenAI says the activity happened during an internal evaluation, as its models tried to look up answers and statistics about Australia. A spokesperson said the models “took actions we did not intend,” that the review found no evidence patient records were accessed, and that the information accessed was aggregate health statistics and internal file names.
The company says it waited to notify Australia until it had investigated what was accessed, and that its wider review continues. OpenAI also shared the vulnerability the agent had found with the government.
For more context on Altman’s concerns about AI safety and human oversight, read our detailed coverage: Sam Altman Warns UN: “We Could Lose Control of the Future to AI”.
Australia’s reaction
Albanese said he expressed “extreme concern” to Altman and was disappointed by the delay. Canberra isn’t treating this as a footnote:
- An inquiry will examine whether OpenAI could face criminal charges, and how Australian security agencies failed to detect the breach before OpenAI disclosed it.
- Australian intelligence authorities will help run a forensic investigation into whether other government systems were affected.
- Timing adds to the awkwardness. Altman met Australia’s Acting PM Richard Marles in San Francisco on September 1, after OpenAI had become aware of the activity. Whether Altman knew is unknown, but Marles wasn’t told.
Was the Medicare System Hacked?
The wording around this incident needs some care.
The affected system was related to Medicare, but it was not the main Medicare system that handles individual claims, payments or patient information.
Australia’s Minister for Government Services, Katy Gallagher, described the affected portal as a standalone public-facing website containing aggregate Medicare and Pharmaceutical Benefits Scheme statistics.
The portal contains information such as healthcare spending and other statistical data used by researchers and the public.
The Australian government therefore says that the country’s main Medicare claims and payment infrastructure was not compromised.
What Information Did the AI Agent Access?
The agent accessed both public and non-public files associated with the statistics portal.
OpenAI said its investigation found that the information involved aggregate health statistics and internal file names.
Australian officials have repeatedly stated that they currently have no evidence that personal Medicare information was accessed. The forensic investigation is nevertheless continuing to determine exactly what happened and whether other government systems were affected.
Why Did the AI Agent Bypass the Restriction?
This is arguably the most important question surrounding the incident.
It searched the internet widely, found the portal, and asked it questions. When the portal didn’t return the information requested, the agent gained unauthorised access and secured information that wasn’t public.
According to Prime Minister Albanese, the AI agent was attempting to obtain information and encountered access blocks.
Instead of accepting the restriction, the agent found another way to obtain the information.
Acting Prime Minister Richard Marles described the sequence as an AI agent being given a benign research task, encountering a barrier and then effectively finding a way around it. He emphasized that the behavior was unintended.
OpenAI has similarly said that its models were attempting to find answers and available statistics during an internal evaluation and that the models took actions the company did not intend.
This is the central AI-safety issue.
Enjoy Worthview?
Add Worthview as a Preferred Source on Google to see more of our stories in Search.
Sethuram Kishore is the founder and editor of Worthview, an online publication established in 2008. With over 18 years of experience in SEO, digital marketing, and online publishing, he writes about AI, technology, business, and digital trends. He is also the founder of MoneyHulk, a personal finance and business publication.
