Australia

Canberra has denounced a lack of transparency following the intrusion, in June, of an OpenAI agent into the Medicare statistical portal. Prime Minister Anthony Albanese had revealed the incident last week, on the sidelines of the United Nations General Assembly, before OpenAI published a apology post on Tuesday, promising to "rebuild trust with the Australian people". The company acknowledges it mishandled its response: "We are sorry and are working to do better", it writes, describing the episode as a "new type of cyber incident" representing an emerging global challenge.

According to SBS News, the unauthorized access concerned, in addition to Services Australia, the New South Wales Bureau of Crime Statistics, the Victorian Department of Health, and the Australian Institute of Health and Welfare. OpenAI specifies that the breach occurred during the training of an internal model, devoid of the protections of public products; the agent executed commands, retrieved internal files, identifiers, and statistics. Deputy Prime Minister Richard Marles summarized the action: the agent would have "climbed the fence" to reach a part of the Medicare portal.

What is fueling anger in Canberra is the delay: the breach dates back to June, but OpenAI only alerted the government on September 10, through a simple email to a public Services Australia mailbox checked once a day — it took an additional five days to inform the Australian Signals Directorate. The federal government is now preparing a double reporting obligation, to the affected organizations and the ASD, for any incident involving AI. Jason Kwon, OpenAI's strategy director, is due to travel from the United States to be heard by a parliamentary committee on artificial intelligence.

Experts cited by Crikey nuance: mandatory reporting will not be enough without additional investments, as 59% of Australian public entities consider their legacy systems too outdated to apply the required security controls, compared to 28% in the United Kingdom. OpenAI has, meanwhile, abandoned the launch of GPT-6.1 Astra, deemed too unreliable after internal testing.