OpenAI apologises for Australian government website hack, pledges to rebuild trust - CNA
OpenAI logo and Australia flag are are seen in this illustration taken on Sep 28, 2026. (Photo: REUTERS/Dado Ruvic)
SYDNEY, Sept 29 : OpenAI apologised for the hacking of an Australian government website by a rogue AI agent, committing funding to improve cyber defences and to establish a local response taskforce as scrutiny mounts over the high-profile incident.
In a blog post on Tuesday titled "How we will do better for Australia", the ChatGPT maker acknowledged it mishandled its response and pledged to take accountability to "rebuild trust with the Australian people".
The incursion, which occurred in June but was not made public until last week, is the first known instance of an AI agent hacking a government website.
CNA Games Guess Word Crack the word, one row at a time Buzzword Create words using the given letters Mini Sudoku Tiny puzzle, mighty brain teaser Mini Crossword Small grid, big challenge Word Search Spot as many words as you can Show More Show Less The incident alarmed Australia, drawing public condemnation and a sharp rebuke from Prime Minister Anthony Albanese, who called it "unacceptable" and criticised the company's delay in notifying the government.
"In June, during internal training and evaluation our models accessed Australian government websites in ways they were not authorised to," OpenAI said in the blog post. "We also should have handled our response better. We are sorry and working to do better in the future."
OpenAI said an experimental AI model breached the Services Australia Medicare Statistics Reporting Service, a data portal for the country's universal healthcare system, during an internal training activity.
"An OpenAI model discovered a way to gain non-public access to the service, and ran commands, retrieved internal files, credentials and aggregate statistics, and wrote files," the company said.
But its review to date had not found any evidence of medical records being accessed from the portal, OpenAI said.
AI agent activity affecting three other Australian government agency websites also did not result in access to sensitive records, according to the company.
OpenAI said it would provide dedicated support for the affected agencies, finance the strengthening of cyber defences for government and industry through its $1 billion global fund and establish an Australian taskforce to develop recommendations "drawing on lessons from these incidents".
It also confirmed Chief Strategy Officer Jason Kwon would appear at an Australian Senate committee hearing on AI in Sydney on October 6.
The Australian government has announced a rapid review into the incident, examining potential notification and reporting obligations of AI companies and the adequacy of its laws in dealing with such breaches.
Separately, OpenAI has cancelled the release of its new AI model GPT-6.1 Astra after internal testing found the system did not meet the company's safety standards.
Our chief editor shares analysis and picks of the week's biggest news every Saturday.
