An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later

Australia is investigating an incident where an OpenAI research agent accessed non-public files on a Services Australia health statistics portal in June, wrote files to an internal server, and potentially interacted with three other government websites; OpenAI notified the government in September, prompting criticism over the delay. Authorities believe no personal data was accessed but have opened inquiries, and Australia is forming a task force to consider legal, law-enforcement, and legislative responses to AI-related cyber risks.