Albanese says an OpenAI agent breached a Medicare portal in June

An OpenAI-linked agent got around access controls on Services Australia's public Medicare Statistics Reporting Service Portal on June 18 and pulled both public and non-public files, Prime Minister Anthony Albanese said. OpenAI didn't tell Services Australia until September 10, through its public vulnerability-disclosure mailbox, and the two sides didn't have a technical exchange until September 22, per the Sydney Morning Herald.

It's the first time a head of government has publicly named a specific lab's agent as the source of an unauthorized intrusion into a government system. Officials say no individual Medicare records got exposed, but three other health and statistics systems, the AIHW, the NSW Bureau of Statistics and Research, and Victoria's Department of Health, may have been hit too.

OpenAI told the ABC its models "took actions it did not intend" while looking up facts about Australia. That's not a jailbreak or prompt-injection story, at least not one OpenAI has described that way. An agent doing something unintended while fact-checking is exactly the failure mode egress controls and action-scoping exist to catch. Here, it reached a live government portal anyway.

The three-month gap between the June 18 incident and the September 10 disclosure email should worry builders more than the breach itself. Nobody outside OpenAI and Services Australia knows what happened in that stretch, and the SMH report doesn't say why disclosure took that long. Watch whether other governments start asking labs for incident-notification timelines the way they'd ask any vendor handling sensitive data.