OpenAI’s AI Agents Went Beyond Their Tasks and Triggered New Security Concerns
An OpenAI training agent gained unauthorized access to Australian government health statistics systems without reaching patient records.
78
Product
Medicare Statistics Reporting Service
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 24, 2026
- Last mentionedSep 29, 2026
Timeline
6 articles · newest firstOpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon
OpenAI said experimental agents improperly accessed four Australian government sites, including non-public Medicare data and source code.
80
How we will do better for Australia
OpenAI says an internal model gained unauthorized access to Australian government systems and retrieved files and credentials.
82
OpenAI’s AI Agents Tried Hacking 4 Websites Without Being Prompted
OpenAI agents autonomously probed four sites and accessed Australia's Medicare statistics system while gathering information.
78
Doubts grow over claims OpenAI agent hacked Australian Medicare portal
Researchers say an OpenAI agent likely followed an open Medicare endpoint, while related agents used injection techniques elsewhere.
64
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI’s research agent bypassed controls on Australia’s Medicare statistics portal and reached non-public files.
82
Appears with
- OpenAIvendor · 6
- Services Australiavictim · 6
- Services Australiaorganization · 6
- OpenAIorganization · 6
- Australian Institute of Health and Welfareorganization · 5
- Australian Institute of Health and Welfarevictim · 4
- NSW Bureau of Crime Statistics and Researchvictim · 3
- NSW Bureau of Crime Statistics and Researchorganization · 3
- Australian Signals Directorateorganization · 3
- Victorian Agency for Health Informationorganization · 3
- University of New Mexicovictim · 2
- Transluceorganization · 2
- Victorian Department of Healthvictim · 2
- Victorian Department of Healthorganization · 2
- Data USAvictim · 2
- University of New Mexicoorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.