Australian Government: OpenAI Agents Breached Government Medical Data Website

Beating AI News Flash: Australian Prime Minister Anthony Albanese said an OpenAI AI agent accessed Australia’s government medical statistics portal without authorization in June this year, gaining access to some public and non-public documents. The Australian government is currently conducting an investigation. According to the Australian government, the website is managed by Services Australia, and mainly provides non-sensitive statistical data such as Medicare medical expenditures. There is currently no evidence that patient personal information was accessed, though the investigation remains ongoing. The government added that three other government websites may have been affected by the AI agent’s activities. OpenAI stated its internal probe found the accessed information included aggregated medical statistics and internal document names, with no evidence of patient records being accessed. The company said its model was attempting to find answers via multiple Australian government websites and services at the time, and took actions unanticipated by OpenAI. Albanese noted the Australian government did not receive notification of the incident from OpenAI until September 10, and expressed “extreme concern” over the delayed alert. The government will also investigate why its systems failed to detect the relevant activities in a timely manner. The incident, cited by Reuters as one of the first known cases of an AI agent invading a government website, has once again sparked external attention to cybersecurity risks posed by AI agents with autonomous operational capabilities.