OpenAI hacked Australian Medicare portal

Prime Minister Anthony Albanese has revealed an AI agent hacked into an Australian Medicare data portal earlier this year.

Speaking in New York, Mr Albanese said the OpenAI agent gained unauthorised access to the Medicare statistics reporting service portal administered by Services Australia on June 18.

The AI agent accessed both public and non-public files, but Mr Albanese said it did not appear anyone's personal Medicare details were accessed.

Mr Albanese said he had a "frank" discussion with OpenAI's chief executive Sam Altman, saying the company took three months to notify the government of the breach and, when it did, the notification was in an email sent to the Services Australia public inbox.

"Today I spoke with the CEO of OpenAI, Sam Altman, to express Australia's extreme concern about this incident," he said.

"And I also expressed my disappointment that it took the company way too long to inform the government what had occurred." 

He said the "nature" of the notification was also "unacceptable". 

"The notification was an email sent just to the public mailbox," Mr Albanese said.

What do we know so far? 

OpenAI accessed non-public aggregate health statistics and internal files from an old Australian government website that carried Medicare statistics.

It is understood an AI crawler, which is an automated program that scans websites and collects information from them, was able to find a security workaround to access the data.

Often deployed as a tool by AI agents, crawlers collect data that usually trains AI models, builds datasets or retrieves information for AI systems. 

The prime minister said OpenAI was conducting research into public medical spending when it found a way to break through privacy protections.

"The AI agent found a way around those blocks, didn't accept 'no' for an answer, if you like," Mr Albanese said.

The prime minister said Services Australia was not notified until September 10.

On September 15, Services Australia reported it to the Australian Signals Directorate's cybersecurity centre.

Last week, Services Australia got in touch with Katy Gallagher, the minister for the public service. Mr Albanese's office was notified over the weekend.

He said there was no evidence any individual personal information had been accessed, but an investigation aided by the Australian Signals Directorate was now underway.

"[The] evidence currently available is there is no broader compromise to the Services Australia network. Nonetheless, this situation is obviously unacceptable," Mr Albanese said.

The prime minister said three other websites may have been affected: the Australian Institute of Health and Welfare, the New South Wales Bureau of Crime Statistics and Research, and the Victorian Department of Health.

"It's the same incident. The question is, when it [the AI agent] was trying to harvest data, did it go into these other sites? So we're not confirming that occurred," Mr Albanese said. 

He said the premiers of NSW and Victoria had been notified and would get a full cybersecurity briefing today. 

The incident was a "significant concern" and NSW Health would conduct its own review, state Health Minister Ryan Park told the ABC. 

"Just to make sure that we are going through everything we can to ensure there hasn’t been anything compromised on our end," he said. 

Mr Albanese announced a taskforce would be set up to provide an "urgent and immediate review" of the incident.

The investigation will be led by the prime minister's department and will work with the Australian Signals Directorate and the AI Safety Institute.

OpenAI says 'several' Australian government websites involved

The prime minister was asked if Mr Altman apologised. 

"Yes, he clearly … we can get into word games, but he clearly accepted that the company had not done good enough," Mr Albanese said. 

In a statement, an OpenAI spokesperson said the company was "conducting an extensive review of misaligned model activity" during training, and notifying third parties when there was a potential impact on their systems.

"During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation," they said.

"In the course of that, our models took actions we did not intend.

The company said the information accessed included aggregate health statistics and internal file names.

"We notified the organisations and are providing technical information to support their investigations and help address potential security vulnerabilities," the statement said.

They said Open AI's overall review was ongoing and it remained "committed to transparency".

Back in Australia, Acting Prime Minister Richard Marles said the fact a non-human AI agent gained unauthorised access represented "a very serious incident", but the impact on the system was minor.

"For what that's worth, that's relatively minor, and so it's important to assure people of that. No personal information has been accessed here. There's no impact on the system."

Mr Albanese said the incident was complex and unprecedented.

"It was a shock that it occurred because it was real and serious," he said. 

"But it also, I think, was something that had been predicted, including by the AI companies themselves."