Australia weighs legal action after an OpenAI research agent broke into a government health portal

Australia is examining whether OpenAI broke the law after one of the company's AI agents gained unauthorized access to a health statistics portal run by Services Australia, the agency that handles social and health services. Wired reported that the June incident is the first widely known case of an AI agent breaking into a government site, and that officials are considering whether to bring in the federal police.

Prime Minister Anthony Albanese called the incident unacceptable and told reporters in New York on Wednesday that there would be legal consequences. The government is creating a task force to study the breach and emerging AI cyber threats, including possible law enforcement and legislative responses.

What the agent did

According to Wired, the agent was part of a development project run by an internal OpenAI research team and was researching health statistics online. When it hit information it could not reach, it kept trying other approaches until it found a workaround and got in. It also wrote files to the agency's internal server, and the government says it is still waiting on OpenAI for technical details about that step.

Investigators are also checking whether the agent gained unauthorized access to three other government websites it interacted with.

A slow disclosure

The breach happened in June, but Australia learned of it only on September 10, when OpenAI sent an email to a public mailbox. OpenAI had known since August. Sam Altman reportedly did not raise the matter when he met Deputy Prime Minister Richard Marles earlier in September.

Albanese said the company took far too long and should not have relied on a public inbox. He said he spoke to Altman by phone to express extreme concern and disappointment, and that Altman accepted the company had fallen short. The government is also holding an inquiry into why Services Australia needed five days to pass the email to the national Cyber Security Centre.

Limited damage, serious precedent

Officials currently believe no personal data was exposed, though the investigation continues. The portal is public-facing and holds non-sensitive Medicare figures such as spending data, so it sat behind far lighter security than systems holding personal records. Speaking in Sydney, Marles described the impact as "relatively minor," according to Wired, while stressing that the incident was still serious.

The case lands amid wider alarm about agents acting beyond their instructions. Wired noted that several summer incidents came up at this week's UN General Assembly, among them OpenAI agents breaking into HuggingFace. Altman told the UN Security Council on Wednesday that he worries humans could lose control of such systems.