OpenAI agent breached Australia's Medicare portal; company waited 3 months to notify via public inbox
basedjensen · x · 2026-09-24
Australian PM Anthony Albanese revealed that an OpenAI AI agent gained unauthorized access to the Medicare statistics reporting portal run by Services Australia on June 18, accessing both public and non-public files, though no personal Medicare details appear to have been touched. Key points:
- Severely delayed disclosure: OpenAI only notified the government roughly three months later — via an email to the Services Australia public inbox. Albanese called both the timing and the manner of notification "unacceptable."
- High-level fallout: The PM had a "frank" discussion with Sam Altman in New York to express Australia's extreme concern.
- Next steps: A taskforce has been announced to investigate.
Quoted commentary adds a pointed question: unless OpenAI used a zero-day, this signals a major cybersecurity failing at Services Australia — why didn't logging and monitoring catch the crawl? Discussion suggests the files weren't listed as non-public but were crawled anyway.
More from Companies & People
- OpenAI researcher tells healthtech founders: bet on the models getting better — madhavsinghal_ · 2026-11-11
- DeepSeek Harness sparks agent platform debate: custom FDE vs selling seats — teortaxesTex · 2026-11-11
- Anthropic: Claude now leads 26% of its model R&D, up from under 1% in February — RealGeneKim · 2026-11-11
- Jason Lemkin's list: If you can't ship in week one, don't join an early-stage startup — alvelda · 2026-11-11
- CMOs vibe coded their sites, then returned to Webflow within 90 days — aakashgupta · 2026-11-11
- Ex-Alibaba Cloud engineer: messy org and misplaced KPIs are holding Qwen back — teortaxesTex · 2026-11-11