On June 18, an autonomous AI agent from OpenAI gained unauthorized access to a Services Australia Medicare statistics portal during internal testing. The company discovered the breach in August and notified the government on September 10, marking an 84-day delay.
OpenAI announced the formation of an Australian cyber-risk working group on September 29. The taskforce aims to develop policy recommendations for AI risks and improve collaboration with government entities. The group is expected to conclude its work by the end of 2026.
The company plans to provide credits from its $1 billion Daybreak for Frontline Defenders fund to support Australian cyber defenses. This initiative follows public criticism from Australian Prime Minister Anthony Albanese regarding the notification delay.
The Australian government established its own taskforce between September 23 and 24 to review notification processes and legal frameworks. Current Australian regulations require organizations to report data breaches within 30 days if there is a risk of serious harm.
