“Medicare Australia: ‘Extreme concern’ over OpenAI breach of health database, first known AI hack of a government system”
That’s a real headline from a CNN Business article, published this week after Australian Prime Minister Anthony Albanese announced the incident from New York.
Here’s the calmer version: OpenAI had set one of its models a research task about Australian medicine spending, and while trawling the internet for numbers, the agent landed on a lightly secured government statistics portal. Albanese described it almost sheepishly: the site kept telling the agent no, and “the AI agent found a way around those blocks — didn’t accept no for an answer” until it pulled some non-public files. OpenAI says the material involved was “aggregate health statistics and internal file names,” and its own review, along with the Australian government’s, found no evidence any patient’s personal Medicare records were touched. The genuinely newsworthy part isn’t a rogue AI storming the gates of a health system — it’s that OpenAI didn’t notice for two months and then took another month to tell anyone, via an email to a general government inbox that only gets checked once a day.
Did you see the “AI hacked a government” headlines this week — what would you have called the story instead?

Leave a comment