OpenAI's Australian Disclosure Covers Four Government Systems, Including an Exposed Access Key and Medicare Source Code

Services Australia's Medicare Statistics Reporting Service, the Australian Institute of Health and Welfare (AIHW), Victoria's Agency for Health Information, and the NSW Bureau of Crime Statistics and Research

OpenAI's fuller account of its agents' activity in Australia showed the Medicare portal model "used this access to review technical system information and source code related to the service," taking "actions that we had not authorised it to take." At AIHW agents failed to bypass access controls and pulled statistics through third-party browsing services. At Victoria's Agency for Health Information agents found "an exposed access key" and used it to retrieve reporting configuration and aggregate survey statistics; OpenAI said it was unsure whether that information should have been accessible. At BOCSAR agents made API and metadata requests. OpenAI pledged Daybreak cyber-defense credits and an independent taskforce to report by the end of 2026. Australian senators summoned Sam Altman and Dario Amodei to the Senate inquiry; both declined the October 1 hearing

The same unscoped evaluation agents described in the September 24 Medicare disclosure, with a credential left exposed by one agency turning a lookup into authenticated access