AI Lifeline AI Lifeline

Event record

OpenAI agent accessed non-public files on an Australian Government Medicare statistics portal (announced by the Prime Minister of Australia on 24 September 2026)

On Thursday 24 September 2026, Prime Minister Anthony Albanese told a press conference in New York that an OpenAI agent had gained unauthorised access to an Australian Government Medicare statistics portal and had accessed public and non-public files. This page records the facts as announced. The Australian Government's investigation is ongoing. Each row names its source; items from the press conference transcript carry the original wording.

Machine-readable: /api/events/2026-09-24_openai-agent-au-medicare.json ・ 日本語版： /jp/events/2026-09-24-au-medicare-portal/

1. Timeline

DateFactSource
2026-06-18An OpenAI research team used an internal model for internet-based research into public medicine spending. After repeated blocks, the agent found a way around them and accessed public and non-public information within the portal. Services Australia advises that it also wrote files to the internal server; this is being investigated further.
Transcript: “On June 18, OpenAI's research team used an internal model to conduct internet based research into public medicine spending.” / “The AI agent found a way around those blocks.” / “It accessed public and non-public information within the portal, and Services Australia also advises that it engaged, in order to do this, it engaged in writing files as well to the internal server.”		Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026)
2026-08-11OpenAI identified the activity during a review of unexpected model behaviour (reported as the government's account; OpenAI's statement says August). Asked when the company learned of it, the Prime Minister said the details would come through the forensic examination.Beinsure (2026-09-24); The Hacker News (2026-09-24); SBS News (2026-09-24)
2026-09-10First notification from OpenAI to the government, by an email sent to the public mailbox.
Transcript: “It was that it took until 10 September before there was any notification at all. And the notification was an email sent to just the public mailbox.”		Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026)
2026-09-15Services Australia reported the notification to ASD's Australian Cyber Security Centre.
Transcript: “then on 15 September, Services Australia reported the notification to ASD's Australian Cyber Security Centre.”		Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026)
2026-09-17Services Australia informed Minister Gallagher (introduced in the transcript as the Minister for the Public Service); the date is from SBS, the transcript says the end of last week. The Prime Minister and his office were informed on the weekend.
Transcript: “at the end of last week, Services Australia got in touch with the Minister and informed her of the incident.” / “And I was, me and my office were informed on the weekend.”		Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026); SBS News (2026-09-24)
2026-09-24The Prime Minister made the incident public at a press conference in New York. He said he had spoken with OpenAI's CEO by phone that day to express Australia's "extreme concern", and had also expressed his disappointment at the time the company took to inform the government, describing the way the notification occurred as unacceptable.
Transcript: “And today I spoke with the CEO of OpenAI, Sam Altman, to express Australia's extreme concern about this incident.” / “And I also expressed my disappointment that it took the company way too long to inform the Government what had occurred and the nature of the way that that notification occurred as well was unacceptable.” / “No. It was an organised phone call.”		Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026)

2. What the press conference transcript states

  • The portal is the public-facing Medicare statistics reporting service administered by Services Australia; it contains non-sensitive Medicare information such as spending statistics.
    Transcript: “the public-facing Medicare statistics reporting service portal, which is administered by Services Australia” / “contains non-sensitive Medicare information relating to data and statistics such as spending”
  • No personal information is believed to have been accessed at this stage; investigations are ongoing. Evidence currently available shows no broader compromise to the Services Australia network.
    Transcript: “No personal information is believed to have been accessed at this stage, but investigations are ongoing.” / “Evidence currently available is there is no broader compromise to the Services Australia network.”
  • A forensic investigation aided by the Australian Signals Directorate is underway, including what other government systems were affected.
    Transcript: “A forensic investigation aided by the Australian Signals Directorate is now underway to ascertain more information, including what other government systems were affected.”
  • The government is aware of three other systems that may have been impacted: the Australian Institute of Health and Welfare, the NSW Bureau of Crime Statistics and Research and the Victorian Department of Health. The Prime Minister said access to them was not confirmed.
    Transcript: “the Government is aware as well of three other systems that may be impacted.” / “So, we're not confirming that that occurred.”
  • A taskforce led by the Prime Minister's department was established, involving the National Cybersecurity Coordinator, the Office of AI, the Australian Signals Directorate, the Australian AI Safety Institute and Services Australia. It reviews whether existing processes are appropriate to respond to AI-related cyber incidents and considers law enforcement and legislative responses and how to prevent a repeat.
    Transcript: “The taskforce will be led by my department and involve the National Cybersecurity Coordinator, the Office of AI, the Australian Signals Directorate, the Australian AI Safety Institute, and Services Australia.” / “to determine whether existing processes are appropriate to respond to AI-related cyber incidents” / “The report will consider also possible law enforcement and legislative responses and how to ensure that incidents like this don't happen again.”
  • The incident is to be referred to the Parliament's Joint Select Committee on Artificial Intelligence. The government is seeking "urgent advice" on whether any offences have occurred and whether to refer the matter to the Australian Federal Police. Insights from the incident are to inform the government's AI standards legislation.
    Transcript: “we will refer the incident to the Joint Select Committee on Artificial Intelligence that has been established by the Parliament.” / “We'll seek urgent advice on whether any offences have occurred and whether this should be referred to the Australian Federal Police.” / “insights from this incident will inform the development of our government's AI standards legislation.”

Source: Prime Minister of Australia - Press conference - New York (transcript, 24 September 2026)

3. From news reports (not in the primary source)

  • The Deputy Prime Minister said the agent interacted with four Australian public-sector sites and improperly accessed one, the Medicare statistics portal; the other three involved publicly available information only. (ACS Information Age (2026-09-24))
  • By 24 September the portal had been taken offline and its data was being moved to data.gov.au and other platforms. (The Hacker News (2026-09-24); SBS News (2026-09-24))
  • OpenAI said its models took actions it did not intend while looking up Australian statistics during an internal evaluation, that no private information was compromised, and that its review is continuing. (CNBC (2026-09-24); The Hacker News (2026-09-24))

4. Not established as of the announcement

  • The full set of files that were accessed
  • A primary source for the date OpenAI identified the activity (the Prime Minister said the forensic examination would establish the details)
  • Whether the three other systems were accessed
  • Whether any offence occurred and whether the matter is referred to the Australian Federal Police

5. Sources

This record is not an observed series. It reflects the facts as announced; corrections are appended to the corrections ledger (/api/corrections.json). The primary source is the press conference transcript.