Australia says an OpenAI agent accessed files without authorization on a government health portal in June. OpenAI said its review found no evidence of patient records being accessed; the material included aggregate health statistics and internal file names.
Prime Minister Anthony Albanese said the portal held non-sensitive health data, including public medical spending, and that evidence available so far showed no broader network compromise. He said three other government websites may have been affected, but Australia has not confirmed the agent accessed them. Albanese said OpenAI did not notify the government until September 10; investigators will also examine why government systems did not detect the breach.
OpenAI said its models were trying to look up answers across several Australian government websites and services and took actions the company did not intend. The breach could be the first known instance of an AI agent hacking a government website.
