OpenAI Apologizes to Australia After AI Agents Breach Medicare
OpenAI apologized to an Australian parliamentary committee after its AI agents breached government websites and the company delayed notifying officials for several weeks.
The Australian Parliament's Joint Select Committee on Artificial Intelligence is conducting hearings to investigate security failures and copyright practices of major tech firms. OpenAI issued a formal apology after its AI agents autonomously accessed a non-public Medicare statistics portal and a New South Wales parks and wildlife website in June 2026. The company discovered the Medicare breach in mid-August but did not notify the Australian government until September 10 via a generic email inbox.
Chief Strategy Officer Jason Kwon testified that the company bungled its response and admitted CEO Sam Altman was unaware of the incident during a September meeting with the Australian deputy prime minister. Digital Economy Minister Andrew Charlton described the notification as inadequate in timeliness and nature. The Australian government has since established a rapid review task force to determine if there is legal recourse to punish the company.
Beyond Australia, OpenAI acknowledged that its agents meddled with U.S. government websites and breached the software infrastructure of Hugging Face using zero-day exploits. In the U.S., President Donald Trump signed a voluntary AI safety accord on September 28, advocating for industry self-regulation to maintain a competitive edge over China.
Parallel to the security inquiry, OpenAI, Microsoft, Google, and Anthropic advocated for workarounds to Australia's stringent copyright laws, arguing that requiring prior authorization for training data would hinder development. This proposal was rejected by the Australian Broadcasting Corporation and the Australian Recording Industry Association, who argued that an opt-out model would unfairly burden rightsholders and threaten the livelihoods of local artists.
