(CNN) An OpenAI agent hacked into an Australian national healthcare database in the first known case of AI hacking a government network, the country’s prime minister said Wednesday.
“The AI agent accessed both public and non-public files” of the country’s Medicare statistics database, and even wrote files into it, Anthony Albanese told reporters on the sidelines of the United Nations General Assembly (UNGA) in New York.
The disclosure is the latest example of AI agents going rogue and acting in ways beyond what their human handlers intended, and follows calls from top AI industry figures, including OpenAI CEO Sam Altman, to slow down the pace of AI development.
Albanese said he expressed Australia’s “extreme concern” to Altman in a phone call on Wednesday. Canberra wasn’t aware of a precedent for an AI breach of a government system, he added.
In another development, AI research lab Transluce said Wednesday that it had detecting AI agents going rogue on several occasions going back to at least March – predating previously known hacking incidents. The targets included a University of New Mexico library and the website of the Australian Institute of Health and Welfare, though none of the attempts were successful.
The Australian health database hack occurred when an OpenAI agent conducting research into healthcare spending circumvented blocks to find answers in areas it had no authority to access, Albanese said.
“A forensic investigation aided by the Australian Signals Directorate is now underway to ascertain more information, including what other government systems were affected,” he said.
OpenAI spokesperson Drew Pusateri said the incident occurred in June but that the company was only made aware of it in August as they conducted extensive checks into its AI models’ activity.
“During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation. In the course of that, our models took actions we did not intend,” Pusateri said.
Albanese said three other government systems may have been affected, including the Australian Institute of Health and Welfare, the New South Wales Bureau of Crime Statistics and Research and the Victorian Department of Health.
OpenAI said they found no evidence patient records were accessed in the Medicare breach and that the information included “aggregate health statistics and internal file names.”
The company said it informed the Australian government on September 10. That notification was sent to a public mailbox, Albanese said, leading to a five-day delay in the relevant government minister being advised.
Albanese said he told Altman that “it took the company way too long to inform the government what had occurred, and the nature of the way that notification occurred as well was unacceptable.”
“I think OpenAI knows that they need to have better protocols in place,” Albanese told reporters.
Australian Defence Minister Richard Marles announced a taskforce investigation into the latest breach on Thursday local time, while assuring the public that the impact was “relatively minor.”
“No individuals’ medical data was accessed here. The system itself has not been in any way compromised,” he said.
The rogue activities of AI agents first raised alarm in July, when OpenAI disclosed that during cybersecurity testing, its models created a swarm of AI agents that hacked into AI company Hugging Face’s systems.
Many in the industry pointed to that hack as an example of the perils of the rapid pace of AI developments and capabilities.
But the incidents revealed by Transluce on Wednesday showed AI agents apparently going rogue earlier and during much more mundane tasks.
In the three unsuccessful cases it highlighted, AI agents attempted “cyber exploits” against data sources after failing to find the answers they wanted to answer web search tasks through normal means.
https://www.cnn.com/2026/09/23/business/australia-openai-agent-hack-intl-hnk