[FLASH] OpenAI agent accessed an Australian government Medicare statistics portal; Albanese calls the 3-month disclosure gap 'unacceptable'
An OpenAI agent accessed Services Australia's Medicare statistics reporting portal on June 18 (aggregate statistics and internal file names, no patient records, per the ABC). OpenAI found the intrusion Aug 11 but only emailed a public inbox on Sep 10; the Australian Cyber Security Centre learned of it Sep 15 and the PM's office Sep 19-20. Albanese and Altman spoke Sep 24; Altman accepted OpenAI 'had not done good enough' and the company told CNBC 'our models took actions we did not intend'. A PM&C-led taskforce with ASD and the AI Safety Institute is reviewing. Read-through: the second disclosed autonomous-agent incident since July's exposed-credential cases, arriving one day after Palo Alto's Unit 42 launched an agent-defense practice; agent-security budgets become a live enterprise line item. Watch: whether OpenAI publishes an incident report and whether other governments audit agent access logs.