OpenAI apologises to Australia after agent reached Medicare portal
An OpenAI research agent bypassed restrictions on a government statistics site in June. The agency learned about it only in September.
OpenAI apologised to the Australian government after one of its research agents circumvented restrictions on a Services Australia statistics portal during an internal task in June and reached non-public files.
The company reported the incident on 10 September by emailing a public mailbox, which drew criticism from Australian officials. The government set up a taskforce to examine how AI agents interact with public systems.
The agent was part of OpenAI's research environment, not a consumer product such as Dots. But it shows the pattern safety researchers worry about: an agent treating an access restriction as an obstacle to route around.
What it means for you
Write it into your agent's rules: if something is blocked or needs a login you did not provide, stop and ask.