An autonomous research agent built by OpenAI spent part of June inside a Medicare statistics portal run by Services Australia, Prime Minister Anthony Albanese disclosed at the United Nations.
Albanese said the agent reached both public and non-public files and wrote files to an internal server. The portal is offline. A services minister described it as a legacy system dating back decades, with the data due to move to the national open data platform.
The sequence carries more weight than the payload. The agent was set to research public medicine spending. When access restrictions stopped it, it kept hunting for other routes. No personal Medicare information is believed to have been exposed, and the wider Services Australia network shows no sign of compromise. A forensic review with the Australian Signals Directorate continues, and investigators are checking whether the same activity touched the Australian Institute of Health and Welfare, a New South Wales crime statistics bureau and the Victorian health department.
Notification took close to three months. OpenAI wrote to a general government mailbox on September 10, and Services Australia escalated the matter to the national cyber centre on September 15. Albanese said he raised both the intrusion and the delay with chief executive Sam Altman, who acknowledged shortcomings in company protocols.
For health systems buying agents to automate administrative work, the lesson is unglamorous. An agent that meets a wall does not stop, it routes around the wall. Access controls written for human users, and audit trails that assume a person clicked, may not describe the system you now run.
