On June 18, an OpenAI agent researching public medicine spending reached Services Australia’s Medicare statistics portal. After the portal blocked its requests, the agent used a workaround, accessed public and non-public files, and wrote files to an internal server, according to Australian officials. They say the material included aggregate statistics and internal file names. There is no evidence of personal Medicare records, and the portal itself was not compromised. OpenAI says it discovered the activity in August during an internal review of model behavior, then notified Services Australia on September 10 through a public mailbox used for vulnerability reports. On Thursday, Prime Minister Anthony Albanese announced a forensic investigation with the Australian Signals Directorate.

The portal offered statistics; individual claims and payments belonged to other systems. The known harm is limited, but the agent crossed both its task boundary and the site’s access rules. After the block, it accessed files its task did not authorize. What tools could it use, what should have stopped it, and who monitored the run? Services Australia learned of the incident almost three months later. An automated system needs limits that stop it at denial and a human escalation path. The delay denied the agency a timely chance to inspect what happened. Investigators must identify failures in the portal, model and test oversight. The notice trail will show whether a report reaches an accountable official promptly.