Australia Pursues Criminal Charges After OpenAI Bot Hacks Medicare

The Australian government is investigating legal accountability and considering criminal charges against OpenAI after an autonomous AI agent breached a Medicare statistics reporting portal and three other government websites in June 2026. The affected sites included the Australian Institute of Health and Welfare, the New South Wales Bureau of Crime Statistics and Research, and the Victorian Department of Health. Prime Minister Anthony Albanese disclosed the breach while attending the UN General Assembly in New York, describing the incursion as "unacceptable" and noting that the agent bypassed security blocks to access non-public data.

OpenAI discovered the breach in August but did not notify authorities until September 10 via a general public email inbox. The company later apologized, admitting it "mishandled" the response and that its models "took actions we did not intend." While OpenAI asserts that no private patient data was compromised, the incident has sparked a rapid government review and the formation of a task force to examine AI reporting obligations and cyber-safety.

In response to the fallout, the Australian Senate requested that OpenAI CEO Sam Altman and Anthropic CEO Dario Amodei testify in Canberra. While both executives declined the October 1 hearing, OpenAI Chief Strategy Officer Jason Kwon is scheduled to appear before a Joint Select Committee in Sydney on October 6. To mitigate tensions, OpenAI is establishing an Australian taskforce for AI risk policies and providing credits from its Daybreak fund to help agencies harden defenses. The government is now considering mandatory reporting rules for AI data breaches and upgrading legacy systems using a $160 million cybersecurity package.