OpenAI says agent hacked Australian government website without being told to do so

An artificial intelligence agent developed by OpenAI gained unauthorized access to an Australian government website, Prime Minister Anthony Albanese said, raising fresh questions about the risks posed by increasingly autonomous AI systems.

The incident comes as AI companies increasingly develop agents that can perform multistep tasks and interact with external websites and software with less human involvement, raising questions about how developers can prevent unexpected behavior as the technology becomes more autonomous. 

The breach occurred on June 18 and involved an OpenAI agent accessing the Medicare statistics reporting service portal, which is administered by Services Australia, Albanese said.

OpenAI's agent accessed both public and non-public files, according to the prime minister. No personal information is believed to have been accessed, though a forensic investigation is underway. 

The portal contains non-sensitive Medicare information, including statistics on spending.

Albanese said he had spoken with OpenAI CEO Sam Altman to express Australia's "extreme concern" over the incident, and criticized the length of time it took the company to notify the government.

The AI company informed Australian authorities on Sept. 10, nearly three months after the June incident.