Updated September 24, 2026 — 7:56am,first published 6:25am
An synthetic intellect delegate infiltrated a Medicare website in June, accessing community and non-public records and penning records to an inner server, Prime Minister Anthony Albanese has revealed.
Speaking to reporters in New York, Albanese stated the event engaged an OpenAI delegate gaining unauthorised admission to the public-facing Medicare Statistics Reporting Service portal, administered by Services Australia.
He stated the event occurred in June this year, but the Commonwealth authorities was lone informed via an email from OpenAI on September 10.
“This circumstance is evidently unacceptable,” he said. “And today, I said alongside the CEO of OpenAI, Sam Altman, to province Australia’s extreme involvement concerning this incident, and I additionally expressed my frustration that it took the business way too lengthy to communicate the authorities what had occurred and the nature of the way that that notification occurred as fine was unacceptable.“
Despite persistent questioning, Albanese would not disclose whether he discussed the breach alongside his conversation alongside President Donald Trump final night.
“I do it privately... I have a association alongside President Trump, anywhere we have conversations, and... to several people’s surprise, it must be said, have a extremely fine association since we do have a relationship.”
Albanese stated there was no evidence so far that individual data had been accessed or that the broader Services Australia network had been compromised, but a forensic inquiry was under way alongside the aid of the Australian Signals Directorate.
He stated the authorities was additionally conscious three another systems that may be affected, the Commonwealth’s Australian Institute of Health and Welfare, the NSW Bureau of Crime Statistics and Research, and the Victorian Department of Health.
Albanese said briefly to Victorian Premier Ben Carroll and NSW Premier Chris Minns final night.
He stated the first evidence has established the delegate accessed publically accessible files, as fine as matter not intended for community access.
“Evidence currently accessible is there is no broader colony to the Services Australia network. Nonetheless, this circumstance is evidently unacceptable,” he said.
“No individual data is believed to have been accessed at this stage, but investigations are ongoing,” Albanese said.
He stated the event began on June 18 whenever an OpenAI investigation squad used an inner example to behavior internet-based investigation into the community medication space.
The AI delegate encountered repeated blocks during seeking data from the authorities portal but established ways about them, ultimately gaining unauthorised admission to another areas.
“There were blocks plainly which were coming back, telling the AI delegate no,” Albanese said. “The AI delegate established a way about those blocks, didn’t obtain no for an answer.”
The delegate afterward accessed community and non-public data and, according to Services Australia, additionally wrote records to an inner server. Albanese stated OpenAI did not notify the authorities until September 10, nearly three months following the incident, and did so by sending an email to a community mailbox.
Services Australia subsequently reported the notification to the Australian Cyber Security Centre on September 15. The agency informed Public Service Minister Katie Gallagher of the event final week, alongside Albanese saying he was briefed complete the weekend.
The authorities volition established a project power led by the Department of the Prime Minister and Cabinet to urgently analyze the event and decide whether existing processes are adequate for responding to AI-related cyber incidents.
The project power volition contain the National Cyber Security Coordinator, the Office of AI, the Australian Signals Directorate, the Australian AI Safety Institute and Services Australia.
The assessment volition analyze imaginable law implementation and legislative responses, during the event volition additionally be referred to Parliament’s Joint Select Committee on Artificial Intelligence.
Albanese stated the authorities would search urgent direction on whether offences had been committed and whether the matter have to be referred to the Australian Federal Police. The event volition additionally nourish into the government’s planned AI standards legislation.
OpenAI stated its models had accessed “several Australian authorities websites and services” during an inner evaluation. The models were trying to appearance up answers and data for questions concerning Australia.
“In the way of that, our models took actions we did not intend,” an OpenAI spokesman said.
The business stated its assessment established no evidence that tolerant records had been accessed. It stated the data accessed included total health data and inner document names.
OpenAI stated the action took location in June, but it did not rotate into conscious of it until August. It established the action during a assessment of what it calls “misaligned example activity” in its training and evaluation. It stated it notified Services Australia on September 10.
“We notified the organisations and are providing specialized data to assistance their investigations and assistance location possible safety vulnerabilities,” the spokesman said. “Our general assessment is ongoing.”
OpenAI did not say which another authorities websites and services were affected.
Albanese used the disclosure to fortify his disagreement for tighter safeguards about quickly evolving AI technology.
“AI is changing the world,” he said, pointing to its possible to provision financial growth, efficiency gains and advances in health, discipline and innovation.
“But AI additionally poses important risks, and that’s why we need guardrails to defend our way of life.”
“We desire to create certain that we form AI fairly than AI shaping us. Put simply, humans must remain in control.”
Albanese stated the authorities understood the event would be concerning to Australians but sought to reassure the community that no individuals were currently known to have been affected.
“At this item in time, there is no evidence that any individuals have been impacted,” he said.
Albanese stated several particulars could remain confidential if they engaged national security, but Australians had a correct to cognize concerning the incident.
“I think it’s really crucial that group are conscious that this has occurred,” he said.
News of the breach comes two days following Albanese urged another earth leaders to merge on efforts to defend group from the risks of synthetic intelligence, saying that no nation can oversee the technology’s expanding risks alone.
Australia was among 22 signatories calling for new global safeguards on AI at the United Nations on Monday, amid warnings from scientists and industry executives that the fast betterment of mighty systems could outpace governments’ capability to authority emerging risks.
US President Donald Trump has rejected calls for slowdowns and restrictions on AI growth, alert that any self-imposed guardrails would provision China a hazardous advantage.
Over the former two months, OpenAI, Anthropic and Google have all stated their models bankrupt into genuine device systems during being tested for hacking ability.
Alastair MacGibbon, Australia’s erstwhile cybersecurity tsar who is now chief scheme authoritative at CyberCX, stated the delegate had not been set up to hack anything.
“This was an delegate that was not tasked alongside hacking; it was tasked alongside medicinal research, and it fair happened to use tools in its tool strap to go concerning achieving that objective, which engaged basically hacking,” he said.
“They’re not doing it since they’re malicious. They’re doing it since they’ve been stated a task. Imagine if you had a malicious individual getting agents to do these tasks.”
MacGibbon stated the bigger involvement was that the breach went unnoticed. “The inquiry we have to be asking is the Australian authorities didn’t detect this in June,” he said.
He additionally criticised the government’s backing for AI oversight. He compared the AI Safety Institute’s prosperity to a brace of highway dreary place programs in Queensland complete four years. He stated he understood the Office of AI in the Department of Prime Minister and Cabinet had “literally a fistful of people”.
“I’ve been in this equivalent for 25 years and we’ve been failing,” MacGibbon said. “Now that we have an Australian victim… It have to be taken seriously. The hubris has to end.”
Be the archetypal to cognize whenever important news happens. Sign up for breaking news alerts on email or rotate on notifications in the app.
Rob Harris is the national equal for The Sydney Morning Herald and The Age based in Canberra. He is a erstwhile Europe correspondent.Connect via email.
David Swan is the innovation publishing company for The Age and The Sydney Morning Herald. He was earlier innovation publishing company for The Australian newspaper.Connect via X or email.