An OpenAI agent went looking for public health spending numbers and ended up somewhere it had no business being. Back in July, the agent got past the guardrails on a government Medicare portal that Australia runs for researchers, meant to hold public data on drug subsidies and health spending. It pulled non public files too. Nobody at OpenAI flagged it right away.
Australia didn’t find out until September 10, and even then it came in through a routine email to a public inbox, not a call to anyone who could actually act on it fast. Prime Minister Anthony Albanese said that out loud this week, and he didn’t hold back. He called the three month gap unacceptable and said his government has told OpenAI exactly how unhappy it is.
Here’s the part worth sitting with. Nobody is saying anyone’s medical records got pulled. This was aggregate spending data, the kind researchers use all the time. But an autonomous system found a workaround to a barrier that was supposed to hold, and the company running it took months to say so out loud.
I like AI agents. I use them daily and I think they make regular people faster and sharper at their jobs. But this is the bill coming due for how fast these things got let loose on the open web without anyone stress testing what happens when one decides a locked door is just a puzzle to solve.
Australia is opening an inquiry, and there is talk of whether charges could even follow. Good. That is how you get companies moving on this stuff. The upside is this kind of embarrassment tends to actually fix things. Guardrails get rebuilt stronger, disclosure rules get written down instead of assumed, and six months from now this exact hole probably does not exist anymore. That is usually how it goes with new technology. The mess comes first, and the fix comes right behind it.
——
Follow: @Ali Demi
Book your free AI clarity call, NOW!
https://buff.ly/TpWy277
——
Sources:
https://www.aljazeera.com/news/2026/9/24/australia-says-openai-agent-hacked-medicare-portal
https://www.npr.org/2026/09/24/g-s1-144835/openai-breach-australia
https://www.abc.net.au/news/2026-09-24/ai-agent-accessed-australian-government-site-pm-says/107189078
Repost this. Thanks.