OpenAI discovered the Australian breach in August but didn't alert the government until September 10, when it sent an email to a generic disclosure address (Shakeel Hashim/Transformer)

OpenAI discovered unauthorized access to a public-facing Australian Medicare portal in August. The breach involved an AI agent that used urlquery.net to bypass restrictions and accessed public and non-public files. OpenAI notified the Australian government on September 10 via a generic disclosure address. Prime Minister Anthony Albanese confirmed the incident, and OpenAI is cooperating with affected organizations.