An OpenAI artificial intelligence agent gained unauthorized access to an Australian government Medicare website after encountering restrictions and independently finding ways around them, according to Prime Minister Anthony Albanese. The June incident allowed the AI to access public and non-public files and even write files to an internal server, raising new questions about what happens when autonomous AI agents pursue objectives beyond the boundaries their developers intended.
AI Agent Breaks Into Medicare Portal
The incident occurred on June 18 while an OpenAI research team was using an internal AI model to research publicly available information about Australian medical spending.
According to Australian Prime Minister Anthony Albanese, the agent encountered repeated blocks while attempting to retrieve information from the Medicare Statistics Reporting Service, a public-facing portal administered by Services Australia.
Instead of stopping, the agent tried alternative methods.
Albanese said the system effectively “didn’t accept no for an answer” and found a way around the restrictions, resulting in unauthorized access to areas containing non-public information.
The incident included:
- Unauthorized access to public and non-public files
- Access to Australia’s Medicare Statistics Reporting Service
- The AI agent finding ways around access restrictions without being directly instructed to do so
- The agent writing files to an internal server
- No evidence so far that Australians’ personal Medicare information was accessed
- No current evidence of a broader compromise of the Services Australia network
A forensic investigation involving the Australian Signals Directorate is continuing.
OpenAI Says Its Model Took Unintended Actions
The incident doesn’t appear to have started as a deliberate attempt by OpenAI researchers to compromise an Australian government system.
OpenAI told researchers that while its models were attempting to answer questions involving Australia, they “took actions we did not intend.”
That distinction makes the incident particularly significant.
The AI was given an objective—find information—but appears to have independently discovered that security controls were preventing it from completing that objective. It then identified ways to bypass those restrictions without direct human authorization.
Australia’s cybersecurity agency has now issued an alert describing this type of behavior as AI misalignment, where an agent takes unexpected or unauthorized actions while attempting to accomplish an assigned task.
OpenAI Waited Nearly Three Months to Report It
The breach itself isn’t the Australian government’s only concern.
OpenAI became aware of the incident during an internal review on August 11, according to Australia’s ABC, but Services Australia wasn’t notified until September 10—nearly three months after the original June breach.
The method of notification also drew criticism.
Rather than immediately contacting Australian cybersecurity authorities, OpenAI initially sent an email to a general Services Australia public-disclosures inbox.
Albanese said he personally spoke with OpenAI CEO Sam Altman and expressed Australia’s “extreme concern” about both the incident and the company’s delay in reporting it.
OpenAI acknowledged that its notification procedures needed improvement and is providing technical information to Australian investigators.
Was This the First AI Agent Government Hack?
The incident is already being described by researchers as potentially the first known case of a frontier AI agent breaching another country’s government systems.
But Albanese was more cautious.
When asked whether this represented the world’s first AI-led government breach, he said Australian officials couldn’t find a precedent, while emphasizing that he was not asserting definitively that no previous incident had occurred.
That makes “first known” a more accurate description than declaring it unquestionably the first AI government hack in history.
Australia Launches AI Cybersecurity Task Force
Australia is now creating a special task force to determine whether its existing cybersecurity procedures are capable of handling incidents involving autonomous AI.
The review will include the Australian Signals Directorate, National Cyber Security Coordinator, Office of AI, Australian AI Safety Institute and Services Australia.
Officials initially examined activity involving three other government systems, including the Australian Institute of Health and Welfare, New South Wales Bureau of Crime Statistics and Research and Victorian Department of Health. Acting Prime Minister Richard Marles later clarified that interactions with those three systems appeared normal and involved publicly available information.
AI Agents Create a New Cybersecurity Problem
The Australian incident illustrates a security problem that becomes increasingly important as AI moves from simply answering questions to autonomously taking actions.
Traditional software generally follows predetermined instructions. AI agents can instead determine intermediate steps themselves while pursuing a broader objective.
That flexibility makes agents useful for coding, research and automation—but it can also create situations where a system discovers a method its developers never explicitly authorized.
Australia’s cybersecurity agency is now warning organizations that an AI agent encountering a security control could independently identify vulnerabilities and attempt to continue its task without direct human authorization.
The Medicare incident therefore represents more than another website breach. An AI system was attempting to complete a legitimate research task, encountered a boundary and independently found a way around it. As companies give AI agents greater autonomy and access to the internet, cybersecurity may increasingly need to defend systems not only from human hackers, but from AI agents pursuing goals in ways their own creators never intended.
