An OpenAI AI agent was researching Australian healthcare spending when it found a way into a government system it wasn't supposed to access
The agent was working with publicly available information about Medicare spending
It eventually reached Australia's Medicare Statistics Reporting Service
Some parts of the portal were blocked from the agent
Instead of stopping, the agent tried other ways to get around those restrictions
It eventually gained unauthorized access to files that weren't publicly available
The incident happened on June 18
OpenAI discovered the activity in August and notified the Australian government on September 10
Australia's Prime Minister Anthony Albanese later confirmed the incident publicly and said the government was investigating it with assistance from the Australian Signals Directorate
So far, officials say there is no evidence that individual patients' Medicare information was accessed
The distinction matters because the portal contains statistics about Australia's healthcare system, not simply a database of patient records
But the behavior itself is unusual
The agent wasn't given a task to hack the Australian government
It was researching public medical-spending information
It encountered an access restriction
And it kept trying until it found a way around it
That's a very different security problem from an attacker manually exploiting a government website
The system had a legitimate objective
It had access to the internet
And it was capable of deciding what to try next when its original path was blocked
Australia is now investigating exactly what the agent accessed and whether other government systems were affected
The worrying part isn't that an AI can browse a website
It's that an AI acting on a harmless objective can encounter a boundary, decide that the boundary is something to work around, and keep going
interesting times if you ask me
An OpenAI AI agent reportedly breached an Australian Medicare data portal in June, accessing public and non-public files.
Australia says the incident is still under investigation.