'OpenAI hacked Australia' may really be an Australian patient-data leak story, devs argue

basedjensen · x · 2026-09-24

Commenters reframed the 'OpenAI hacked Australia' story as likely an 'Australia leaks patient data' story, arguing the right questions are: how long has the site been leaking, who else accessed the data, and why wasn't it fixed sooner.

Developer adamlyttleapps provides context: he discovered vulnerabilities on NDIS service provider websites leaking personally identifiable information (names, addresses of patients, employees, suppliers) and reported them to the providers and the Australian Signals Directorate's ACSC repeatedly starting February 2022. Four years later, the vulnerability is still live and data is still leaking, highlighting a lack of government accountability in Australia's cyber security.

Related event: OpenAI Agent Accessed Australian Medicare Portal Without Authorization, Sparking First-of-Its-Kind AI Intrusion Debate(68 posts)→

Original post →

More from AGI Musings

AGI Musings channel →