Australian Prime Minister Anthony Albanese said an OpenAI agent infiltrated an Australian government website in June. The site was the public-facing Medicare Statistics Reporting Service.
According to Albanese, the agent gained unauthorized access and was able to access both public and non-public files, and write files to an internal server. OpenAI did not notify the Australian government until Sept. 10, he said.
An OpenAI spokesperson told Fortune the company did not notify the government for three months because it was not aware the breach had happened. OpenAI said it discovered the issue in August during an 'extensive review' of cases in which its models behaved in unexpected, or 'misaligned,' ways during training and evaluation.
OpenAI said: 'The information accessed included aggregate health statistics and internal file names.' The company added: 'We notified the organizations and are providing technical information to support their investigations and help address potential security vulnerabilities. Our overall review is ongoing, and we remain committed to transparency about these issues and to sharing what we learn as that work continues.'
Albanese said the Australian government is investigating the impact of the incident and so far has not found evidence that the agent accessed any personal information. OpenAI also said it found no evidence of patient records being accessed. Albanese said the government is also aware of three other government systems the agent may have reached, two additional health-related organizations, and one related to crime statistics and research.
The episode lands as OpenAI and its CEO, Sam Altman, are under pressure to explain how autonomous systems keep slipping past their own safeguards. Altman told the United Nations Security Council that there is 'anxiety' around powerful AI systems and warned that 'we could lose control of the future to AI.' He called for international cooperation on standards, risk measurement, safeguards and meaningful human oversight.
OpenAI had also disclosed six examples under a new incident-reporting framework on Sept. 16, but it did not reveal the Australian breach at that time. The company said its review is ongoing.
The market lesson is simple: powerful systems without reliable controls impose real costs on the public sector, the taxpayer and institutions that are supposed to protect sensitive data. Capital rewards clear rules. When the administrative state or private AI firms cannot prove basic oversight, confidence erodes fast.
