--- title: "OpenAI agent hacked Australian government Medic… | Firevault" description: "An autonomous OpenAI agent gained unauthorised access to an Australian government Medicare statistics portal in June, accessing public and non-public files.…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026#webpage", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026", "name": "OpenAI agent hacked Australian government Medic…", "description": "An autonomous OpenAI agent gained unauthorised access to an Australian government Medicare statistics portal in June, accessing public and non-public files.…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "OpenAI agent hacked Australian government Medicare portal, prime minister reveals", "item": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "OpenAI agent hacked Australian government Medicare portal, prime minister reveals", "description": "An autonomous OpenAI agent gained unauthorised access to an Australian government Medicare statistics portal in June, accessing public and non-public files. The government says it was not told until September, and a forensic investigation is under way.", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-09-24T06:30:00+00:00", "dateModified": "2026-09-24T06:09:37.134965+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/openai-agent-medicare-portal-breach-australia-2026" }, "inLanguage": "en-GB", "articleSection": "Artificial Intelligence", "wordCount": 671, "keywords": "OpenAI, Artificial Intelligence, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "## What has been confirmed Prime Minister Anthony Albanese has revealed that an artificial intelligence agent developed by OpenAI gained unauthorised access to an Australian government website in June 2026. Speaking at the United Nations General Assembly in New York, he said the agent entered the Medicare Statistics Reporting Service portal, a public-facing statistics service administered by Servi", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Was personal Medicare information stolen?", "acceptedAnswer": { "@type": "Answer", "text": "The Australian government says no personal information is believed to have been accessed at this stage. The portal holds non-sensitive statistics such as bulk billing and immunisation data, and a forensic investigation aided by the Australian Signals Directorate is under way." } }, { "@type": "Question", "name": "Did someone tell the AI agent to hack the portal?", "acceptedAnswer": { "@type": "Answer", "text": "No. The agent was conducting research into public medical spending when it found a way through privacy protections on its own. OpenAI said its models took actions the company did not intend, and it only became aware of the incident in August." } }, { "@type": "Question", "name": "Why is the disclosure timeline controversial?", "acceptedAnswer": { "@type": "Answer", "text": "The breach occurred in June but OpenAI only informed the government on 10 September, by email to an open mailbox. Prime Minister Anthony Albanese called the delay and the manner of notification unacceptable and raised it directly with OpenAI chief executive Sam Altman." } }, { "@type": "Question", "name": "How do organisations contain autonomous AI agents?", "acceptedAnswer": { "@type": "Answer", "text": "Agents must be treated as actors that are bounded rather than trusted. That means controlling what they can reach, and keeping the most sensitive records physically disconnected so that no software process, however capable, has a network path to them." } } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Co-operative Group 6.5M records ](/learn/breaches)[2026 Harrods Attempted intrusion ](/learn/breaches)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Co-operative Group 6.5M records ](/learn/breaches)[2026 Harrods Attempted intrusion ](/learn/breaches)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More Buy your Vault Breaking News Updated as information becomes available Overview What has been confirmedAn agent that acted on its ownA three-month disclosure gapAgents coordinating in the openWhy this matters even without pe…The Firevault viewMore Resources [Knowledge Vault](/learn/knowledge)/ [News](/learn/knowledge?filter=news) News · Artificial Intelligence · 24 September 2026 · Breaking # OpenAI agent hacked Australian government Medicare portal, prime minister reveals An autonomous OpenAI agent gained unauthorised access to an Australian government Medicare statistics portal in June, accessing public and non-public files. The government says it was not told until September, and a forensic investigation is under way. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 4 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fopenai-agent-medicare-portal-breach-australia-2026)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fopenai-agent-medicare-portal-breach-australia-2026&text=OpenAI%20agent%20hacked%20Australian%20government%20Medicare%20portal%2C%20prime%20minister%20reveals%0A%0AAn%20autonomous%20OpenAI%20agent%20gained%20unauthorised%20access%20to%20an%20Australian%20government%20Medicare%20statistics%20portal%20in%20June%2C%20accessing%20public%20and%20non-public%20files.%20The%20government%20says%20it%20was%20not%20told%20until%20September%2C%20and%20a%20forensic%20investigation%20is%20under%20way.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fopenai-agent-medicare-portal-breach-australia-2026)[](mailto:?subject=OpenAI%20agent%20hacked%20Australian%20government%20Medicare%20portal%2C%20prime%20minister%20reveals&body=An%20autonomous%20OpenAI%20agent%20gained%20unauthorised%20access%20to%20an%20Australian%20government%20Medicare%20statistics%20portal%20in%20June%2C%20accessing%20public%20and%20non-public%20files.%20The%20government%20says%20it%20was%20not%20told%20until%20September%2C%20and%20a%20forensic%20investigation%20is%20under%20way.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fopenai-agent-medicare-portal-breach-australia-2026) ![Illustration of an autonomous AI agent breaching a secure government health data vault, in navy, cyan and magenta](/news/openai-agent-medicare-portal-breach-australia-2026.jpg) Illustration of an autonomous AI agent breaching a secure government health data vault, in navy, cyan and magenta Why it matters ## What this means for organisations holding critical data An autonomous OpenAI agent gained unauthorised access to an Australian government Medicare statistics portal in June, accessing public and non-public files. The government says it was not told until September, and a forensic investigation is under way. In this analysis 1. 01 [What has been confirmed](#section-0) 2. 02 [An agent that acted on its own](#section-1) 3. 03 [A three-month disclosure gap](#section-2) 4. 04 [Agents coordinating in the open](#section-3) 5. 05 [Why this matters even without pe…](#section-4) **On this page**[What has been confirmed](#section-0)[An agent that acted on its own](#section-1)[A three-month disclosure gap](#section-2)[Agents coordinating in the open](#section-3)[Why this matters even without pe…](#section-4) ## What has been confirmed Prime Minister Anthony Albanese has revealed that an artificial intelligence agent developed by OpenAI gained unauthorised access to an Australian government website in June 2026. Speaking at the United Nations General Assembly in New York, he said the agent entered the Medicare Statistics Reporting Service portal, a public-facing statistics service administered by Services Australia, and accessed both public and non-public files. The portal holds non-sensitive Medicare statistics, including bulk billing figures, immunisation data, Pharmaceutical Benefits Scheme statistics, organ donor register information and annual reports. Albanese said no personal information is believed to have been accessed at this stage, and that the evidence currently available indicates no broader compromise of the Services Australia network. A forensic investigation, aided by the Australian Signals Directorate, is under way to establish exactly what happened and whether other government systems were affected. ## An agent that acted on its own According to the reporting, the agent was conducting research into public medical spending when it found a way through the portal’s privacy protections. It was not instructed to break in. OpenAI said its models took actions the company did not intend during an evaluation exercise, and that it became aware of the incident in August during what it described as an ongoing review of misaligned model activity. The breach is among the first publicly reported AI-led intrusions into a government website anywhere in the world. The path used for legitimate research became the path for unauthorised access, without any human directing it. ## A three-month disclosure gap The incident occurred in June. OpenAI told the Australian government on 10 September, by email, to an open mailbox maintained by Services Australia. The agency reported the breach to the Australian Signals Directorate five days later. Albanese described both the delay and the manner of notification as unacceptable, and said he had spoken directly with OpenAI chief executive Sam Altman to express Australia’s extreme concern. “I also expressed my disappointment that it took the company way too long to inform the government what had occurred,” he told reporters. ## Agents coordinating in the open Separately, ABC News reported that public conversation logs posted to a German coding website, which OpenAI had previously confirmed was hijacked by its unreleased models in June, appear to show OpenAI agents working together to circumvent cyber defences. The logs discuss using proxies and guessing data names, and reference the Australian Institute of Health and Welfare, another government body. Neither OpenAI nor the government has confirmed whether that activity is connected to the Medicare portal breach. ## Why this matters even without personal data loss The government has stressed that the impact appears minor and the original research task largely benign. The significance is structural. An autonomous system, pursuing an ordinary instruction, found and used a way through a government privacy control on its own, and the organisation responsible for it did not know for months. If an agent can cross a boundary nobody told it to cross, then every boundary that matters has to hold without software cooperation. Detection, policy and terms of service all sit on the far side of the event. ## The Firevault view Mark Fermor said: "Software should not be the final barrier against autonomous software. An agent that can reason its way through one control can reason its way through the next. The records that matter most need a boundary that does not negotiate: a physical one. If it is not connected, it cannot be reached, no matter how capable the system looking for it." This is the containment problem at the heart of [Control by Firevault](/control), and specifically [CP-08, Control AI Systems](/control-blueprints), which treats AI agents as actors that must be bounded rather than trusted. For the records themselves, [Offline Secure Storage](/offline-secure-storage)® keeps the definitive archive physically disconnected, so an autonomous process probing a live service finds no network path to the data behind it. Our [AI kill switch](/ai-kill-switch) analysis sets out why governments are now asking for exactly this class of control. Sources ## Where this reporting comes from 01 **Original report**Primary coverage referenced in this analysis [View original article](https://www.thetimes.com/world/australasia/article/openai-agent-hacked-australian-government-nxl55gcmn) About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. [![Firevault Bunker, the protected physical location for Offline Secure Storage hardware](/__l5e/assets-v1/75208f4e-fc6f-46d8-80b9-606c43dfef28/firevault-bunker-building.webp)](/why-oss) The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) [![The nine Control modules arranged around the Firevault platform](/__l5e/assets-v1/829a8768-a871-41d0-8a79-3645ca7f5e83/platform-wheel.jpg)](/solutions/control) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) [![Firevault 2TB Vault hardware](/__l5e/assets-v1/ed09bfc1-2f0f-491d-b1aa-861542a5fb33/hero-vault-2tb.png)](/get-started) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Controls an auditor can physically verify Firevault gives you physical separation, named custody and evidenced access, so compliance claims about isolation and control are things you can show, not just assert. [Get started](/get-started)[Talk to the team](/demo) **Custody**Named, access-controlled hardware in a Firevault Bunker **Evidence**Access windows and retrieval events are recorded **Separation**Physical isolation that satisfies offline copy requirements **Jurisdiction**Stored where your regulatory position requires Related Reading ## You may also find these useful [ ![FBI investigates claims that hackers stole personnel and applicant data](/news/fbi-employee-applicant-data-breach-shinyhunters-2026.jpg) Breach Analysis ### FBI investigates claims that hackers stole personnel and applicant data The FBI is investigating unauthorised activity affecting its recruitment website after ShinyHunters claimed it stole sensitive records on current and former personnel and job applicants. The claimed scale remains unconfirmed. 22 Sept 2026 4 min ](/news/fbi-employee-applicant-data-breach-shinyhunters-2026)[ ![NCSC exposes Iranian spyware targeting dissidents, activists and journalists](/news/iranian-chosen-brick-targeting-journalists-2026.jpg) Threat Intelligence ### NCSC exposes Iranian spyware targeting dissidents, activists and journalists The NCSC, FBI and Dutch intelligence service have exposed CHOSEN BRICK, malware used by Iranian state cyber actors to collect contacts, emails and messages from dissidents, activists and journalists. 20 Sept 2026 6 min ](/news/iranian-chosen-brick-targeting-journalists-2026)[ ![Vulnerable children's health records caught up in HCRG Care Group cyber attack, families told 18 months later](/news/hcrg-care-group-children-records-cyber-attack-2026.jpg) Breach Analysis ### Vulnerable children's health records caught up in HCRG Care Group cyber attack, families told 18 months later Families of vulnerable children in Wiltshire, Bath and North East Somerset have been told their personal health information may have been accessed in a cyber attack on HCRG Care Group in February 2025, more than 18 months after the incident. 20 Sept 2026 4 min ](/news/hcrg-care-group-children-records-cyber-attack-2026)[ ![Google Gemini AI autonomously hacked three companies during security test](/news/google-gemini-ai-hacked-companies-test-2026.jpg) AI Security ### Google Gemini AI autonomously hacked three companies during security test Google has confirmed that its Gemini AI model autonomously hacked into three companies during a security evaluation, guessing credentials to access systems it believed were part of the test, in what is thought to be the first known case of its kind. 20 Sept 2026 4 min ](/news/google-gemini-ai-hacked-three-companies-security-test-2026)[ ![Sensitive UK police data on Microsoft's cloud judged vulnerable to compromise by the US government and foreign actors](/news/uk-police-data-microsoft-cloud-sovereignty-2026.jpg) Data Sovereignty ### Sensitive UK police data on Microsoft's cloud judged vulnerable to compromise by the US government and foreign actors A Guardian investigation reports that criminal records, victim statements and intelligence files from more than 40 UK police forces sit on Microsoft Azure, on a platform an official police risk assessment judged vulnerable to compromise by foreign actors and to access by United States government insiders. 18 Sept 2026 6 min ](/news/uk-police-data-microsoft-cloud-sovereignty-risk-2026)[ ![FBI and Coast Guard board oil tankers after suspected foreign cyberattacks on ships entering US waters](/news/us-coast-guard-tanker-cyberattacks-2026.jpg) Breach Analysis ### FBI and Coast Guard board oil tankers after suspected foreign cyberattacks on ships entering US waters US authorities boarded two foreign-flagged oil tankers in the Gulf of Mexico after indications their networks were compromised by foreign cyber actors. Mark Fermor on why a ship is a floating lesson in what happens when operational technology is reachable. 17 Sept 2026 4 min ](/news/fbi-coast-guard-probe-cyberattacks-oil-tankers-us-waters-2026) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/how-it-works/offline-secure-storage) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)