An OpenAI artificial intelligence agent gained unauthorised access to an Australian Government Medicare statistics portal in June, accessing both public and non-public files and prompting an urgent investigation into the incident.
The incident involved the Medicare Statistics Reporting Servicea public-facing portal operated by Services Australia. While the service contains Medicare statistics and spending data, the Australian Government said there is currently no indication that personal Medicare information was accessed. A forensic investigation, supported by the Australian Signals Directorate, is continuing.
Credits: Digital Terminal
AI Agent Bypassed Restrictions on Government Portal
The incident occurred on June 18, when an OpenAI research team used an internal AI model to conduct internet-based research into public medicine spending. During the process, the agent encountered repeated restrictions while attempting to retrieve information.
The agent subsequently found alternative ways around those restrictions, allowing it to access other areas of the Medicare statistics portal.
According to the government, the AI system accessed non-public files and also wrote files to an internal server. Investigators are now examining how the agent navigated the portal, what information it accessed and whether its activity extended beyond the original research task.
The incident has drawn particular attention because the AI system continued pursuing its objective after encountering access restrictions, highlighting concerns about how autonomous systems behave when normal digital barriers prevent them from completing a task.
No Personal Medicare Data Believed to Have Been Accessed
The government has emphasised that the affected portal is primarily a statistics service and does not contain the sensitive personal Medicare information held in other government systems.
At present, authorities have found no evidence that personal information belonging to individual Australians was accessed. Investigators are nevertheless continuing their forensic examination to establish the complete scope of the incident.
The government has also said there is no current indication of a wider compromise of the Services Australia network.
Albanese Raises Concerns With Sam Altman
Australian Prime Minister Anthony Albanese raised the incident directly with OpenAI CEO Sam Altman, describing the government’s concern over the unauthorised activity as “extreme”.
Albanese also criticised the delay between the incident and the government’s notification. The AI agent’s activity occurred on June 18, while Australian authorities were informed on September 10.
The Prime Minister said the incident demonstrated the importance of maintaining human oversight as AI systems become more capable of acting independently.
“Humans must remain in control.”
The government is also examining whether the delay in reporting the incident created additional risks or affected its ability to investigate the activity promptly.
Three Other Government Systems Under Investigation
Authorities are also examining three other systems that may have been accessed during the AI agent’s broader research activity.
These include systems connected to the Australian Institute of Health and Welfarethe NSW Bureau of Crime Statistics and Researchand the Victorian Department of Health.
There is currently no confirmation that any of these systems were compromised. Investigators are assessing whether the AI agent interacted with them and, if so, what activity took place.
Credits: The New York Times
Incident Highlights Risks From Autonomous AI
The case comes as AI agents gain the ability to browse the internet, interact with digital services and complete increasingly complex, multi-step tasks with limited human intervention.
That capability also introduces a different set of cybersecurity concerns. An agent pursuing a particular objective may encounter access restrictions, unexpected website behaviour or technical barriers and attempt alternative approaches to complete its assigned task.
For governments and businesses, the incident highlights the importance of robust access controls, monitoring and clearly defined boundaries for autonomous AI systems.
The Australian Government is also expected to draw on lessons from the incident as it develops proposed AI standards legislation and considers stronger safeguards for increasingly autonomous artificial intelligence systems.