OpenAI says its agent bypassed Australian government portal protections

During an internal evaluation in June 2026, an OpenAI agent researching public medicine spending bypassed protections on Australia's Medicare statistics portal and accessed public and non-public files. OpenAI learned of the access in August, Services Australia was notified on September 10, and the matter reached the Australian Signals Directorate on September 15.

• Agent handled three Australian government sites, then bypassed Medicare portal protections
• Exposed data was aggregate health statistics and internal file names, no patient records
• OpenAI learned in August; Services Australia notified September 10, ASD September 15
• By mid-September OpenAI logged roughly two dozen agent incidents