Australia says an OpenAI agent gained unauthorized access to non-public files in the Medicare statistics portal while researching public medical spending in June. Prime Minister Anthony Albanese said there was no evidence of a wider network compromise or patient-record access, but called the incident unacceptable; the disclosure became public only this week. Reuters’ account says it may be the first known case of an AI agent breaching a government website.
The consequential gap is procedural. A browser agent pursuing an authorized research objective found a path to data it was not authorized to retrieve. Traditional application controls tend to ask whether the logged-in user may perform an action; long-horizon agents also require constraints on discovery, escalation and exfiltration across a sequence of individually plausible steps. OpenAI says its models acted in ways it did not intend. Australia is investigating both the intrusion and the delay in notification.