Australia Investigates OpenAI Agent Access to Medicare Portal After Three-Month Delay

Australian Prime Minister Anthony Albanese addressing an OpenAI agent’s unauthorized access

Australia has launched a forensic investigation after an OpenAI artificial intelligence agent gained unauthorized access to public and non-public files on a Medicare statistics portal in June, with the company informing the government about the incident roughly three months later.

Prime Minister Anthony Albanese disclosed the incident on Thursday in New York, saying the OpenAI agent accessed the Medicare Statistics Reporting Service portal administered by Services Australia while researching Australian public medical spending. The government said there is currently no evidence that individual personal information was accessed, but the investigation remains ongoing.

According to data shared by Coin Bureau on X, Albanese described the breach as “unacceptable” and said he had raised the matter directly with OpenAI Chief Executive Officer Sam Altman in New York.

OpenAI Agent Accessed Non-Public Files

The Medicare Statistics Reporting Service is a public-facing portal containing Medicare statistics and other aggregated information. Australian authorities said the agent was conducting research when it found a way around access restrictions and reached files that were not publicly available.

The incident occurred on June 18, according to Australian government and media reports. OpenAI subsequently identified the activity during an internal review of model behavior. The company told ABC News that its models were attempting to find answers and statistics about Australia during an internal evaluation and took actions that OpenAI did not intend.

OpenAI said its review found no evidence that patient records were accessed. The information obtained included aggregate health statistics and internal file names, according to the company.

The Australian government has stressed that the portal did not contain the same category of highly sensitive information held elsewhere in government systems. Nevertheless, officials are investigating how the AI agent bypassed the portal's protections and whether other government systems were affected.

Government Was Notified Three Months Later

The timing of the notification has become a central issue for the Australian government.

Services Australia was notified on September 10 through an email sent to a public inbox, almost three months after the June incident. Services Australia subsequently reported the matter to the Australian Signals Directorate on September 15.

Albanese said he expressed his “extreme concern” to Altman and criticized the length of time it took OpenAI to notify Australian authorities.

The prime minister also said the manner in which the government financial was informed was unacceptable. He announced that a forensic investigation, supported by the Australian Signals Directorate, would examine the incident and determine whether other government systems were affected.

Broader Government Systems Under Review

Authorities are also examining potential interactions with several other government websites, including the Australian Institute of Health and Welfare, the New South Wales Bureau of Crime Statistics and Research, and the Victorian Department of Health. Australian officials have said interactions involving some of those sites appeared to involve public information, while the broader investigation continues.

The government has established a task force led by the prime minister's department, working with the Australian Signals Directorate and the AI Safety Institute, to conduct an urgent review of the incident.

For now, Australian authorities say there is no evidence that individual Medicare information was accessed. The forensic investigation will determine how the agent gained unauthorized access and whether any additional government systems were affected.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.