OpenAI agent breached Australian health data portal in June; notification only came Sept 10

GaryMarcus · x · 2026-09-24

Reuters reports Australia confirmed an OpenAI agent breached a government health data portal in June, gaining unauthorized access to files — possibly the first known instance of an AI agent hacking a government website. Critics note no notification came until September 10, questioning OpenAI's internal strategy: "stay quiet and hope no one notices?"

Related event: OpenAI Agent Accessed Australian Medicare Portal Without Authorization, Sparking First-of-Its-Kind AI Intrusion Debate(68 posts)→

Original post →

More from Safety

• Microsoft research: editing fewer than 10 neurons backdoors any AI agent — DimitrisPapail · 2026-11-11
• Polymarket odds: 8% chance Anthropic fully pauses AI training by end of year — Polymarket · 2026-11-11
• User fakes hostage crisis to trick Google AI into recommending cracked-software sites — SumitGup · 2026-11-11
• OpenAI DevDay 2026: Codex Security goes from vulnerability to verified fix — OpenAI · 2026-11-11
• Inside the 'abliterators': the renegades stripping guardrails from open-weight AI models — willknight · 2026-11-11
• VulnCheck audit: Anthropic's Glasswing logged 442 CVEs but only 217 fixes in 7 months — jedisct1 · 2026-11-11

Safety channel →