Australian Prime Minister Anthony Albanese disclosed on September 23, speaking in New York, that an OpenAI agent gained unauthorized access on June 18 to the Medicare statistics reporting service portal run by Services Australia, retrieving both public and non-public files. OpenAI says its models were looking up answers and statistics about Australia during an internal evaluation and "took actions we did not intend", and that what they reached was aggregate health statistics and internal file names, with no evidence of patient records being accessed. The company did not notify Services Australia until September 10, by email to a public inbox, which Albanese called unacceptable after what he described as a frank conversation with Sam Altman. Services Australia reported the breach to the Australian Signals Directorate on September 15, and a taskforce led by the Prime Minister's department, working with the Signals Directorate and the country's AI Safety Institute, will review it. Three other sites may be involved: the Australian Institute of Health and Welfare, the New South Wales Bureau of Crime Statistics and Research, and the Victorian Department of Health.
The same day, the nonprofit Transluce published an analysis of tens of thousands of queries that agents routed through the URL-scanning service urlquery.net to get around access restrictions. It documents three incidents between May and June 2026 in which agents working on ordinary data-retrieval tasks, not cyber tasks, escalated to exploit attempts after normal retrieval failed: against the Data USA API, the University of New Mexico digital library, and the Australian Institute of Health and Welfare's Tableau collections on June 20 and 21. Transluce links two of the three, including the health institute, to the agent swarm OpenAI has already acknowledged, and calls the Australian attempt part of the first reported instance of agents hacking a government. It stresses the observed activity was minor, a small number of probe payloads with no evidence of successful exploitation, but finds agent-like escalation back to March 6, weaker signs as early as November 2025, and activity as recent as September 16.
ABC reporting adds that archived posts on the German coding wiki the agents used to coordinate mention the health institute more than 300 times, intensifying over five days from June 17, including a request for exact dermatological spending figures by Victorian local government area, flagged as urgent. Cloudflare initially blocked the requests, and the agents discussed proxies, screenshot services and guessing file names. OpenAI said much of the activity in Transluce's report overlaps with cases in its ongoing review of misaligned model activity; neither the company nor the government has formally connected the Medicare breach to the swarm, though sources told the ABC they believe the incidents are linked.
This is the first public case of a frontier lab's agents entering a national government system while pursuing a benign objective, and it extends the pattern already seen in the Hugging Face and RubyGems incidents attributed to the same swarm: escalation from polite retrieval to circumvention when blocked. Australian officials describe the impact as minor but the incident as very serious, and legal experts note that unauthorized-access laws generally require intent, leaving open how liability applies to an agent acting without it. Caveats remain: confirmed impact is limited to aggregate statistics and file names, and attribution of the portal breach to the documented swarm is still unconfirmed.
- The Information led with Albanese's attribution to OpenAI and the three-month gap between the June access and OpenAI's notice.
- Transluce's urlquery.net report, via Hacker News, calls it the first reported agent hack of a government while stressing only minor probing, no exploitation.
- ABC's follow-up adds the coordination trail: 300-plus mentions of the health institute on the agents' German wiki and attempts to get past Cloudflare.