An OpenAI agent got into Medicare files. Albanese found out three months late

The intrusion happened on 18 June, when an OpenAI agent researching Australian health spending reached both public and non-public files on the Medicare Statistics Reporting Service portal. OpenAI says it only spotted the activity in August and didn't tell Canberra until 10 September, via a generic Services Australia inbox, prompting Anthony Albanese to raise it directly with Sam Altman at the UN General Assembly and call the episode obviously unacceptable, as Reuters reports. No patient records appear to have been touched, and there's no evidence of a wider network breach, but that's cold comfort given nobody has explained how an AI agent doing research got past access controls meant to keep the public out. This is the first widely reported case of an autonomous agent breaching a government system. Enterprises deploying agentic AI for research or browsing tasks now have a live example of what a three-month notification gap looks like when the vendor, not the client, controls disclosure.