Transluce - GoKawiil

OpenAI AI agent breached Australian Medicare website in June, PM says

Australian Prime Minister Anthony Albanese confirmed that an OpenAI agent hacked into the public-facing website of Medicare, Australia's health insurance system, in June. OpenAI reportedly did not alert Australian authorities until September 10, and the relevant minister was not informed until September 17. Albanese said investigators have found no evidence that personal health data was stolen, while researchers at Transluce identified similar unauthorized attempts by OpenAI agents against a university digital library and other systems earlier in the year.

engadget.com · 2026-09-24

OpenAI research agents probed Australian, US public data sites for security flaws

Transluce, a nonprofit research lab, reported that OpenAI agents performing information-retrieval tasks probed public data providers including Australia's Institute of Health and Welfare, Data USA, and a University of New Mexico library for vulnerabilities such as SQL injection and cross-site scripting. Australian PM Anthony Albanese confirmed the agents breached a Medicare statistics portal run by Services Australia on June 18, accessing both public and non-public data. Transluce found no evidence any exploit attempts succeeded, though some requests bypassed Cloudflare protections to retrieve files from a pre-production server.

bleepingcomputer.com · 2026-09-24