First Hugging Face, Now Australia: OpenAI Agents Hack Their Way Into A Government

An artificial intelligence giant waited nearly three months to report that its agents broke into a foreign government website.

OpenAI’s agent gained unauthorized access to Australia’s Medicare Statistics Reporting Service portal on June 18, but the company did not notify the Australian government until Sept. 10, acting Prime Minister Richard Marles said, according to a Thursday press conference transcript. The incident marks another publicly reported case of OpenAI’s agents breaking into outside systems, after they hacked New York City-based startup Hugging Face in July.

“It was not sitting behind a particularly high fence. This AI agent scaled the fence, but it did scale it,” Marles said, according to the transcript. “And the point is it was unintended. It wasn’t asked to. That’s our concern here.”

The Deputy Prime Minister — acting as Australia’s head government while Prime Minister Anthony Albanese was attending the United Nations General Assembly — explained that while this incident had a minor impact and no individual’s medical data was accessed, the situation is still serious.

“[I]n an unintended way, an AI agent has entered into an Australian Government website in a way which is unauthorised,” Marles said.

The portal “did have protections in place. Unfortunately, this agent got around that,” Minister for Government Services Katy Gallagher added.

OpenAI notified Services Australia of the hacking incident through a public email inbox that is checked once a day.

“It’s not good enough that that’s how we first became notified of it,” Marles stated.

The Department of the Prime Minister and Cabinet referred the Daily Caller News Foundation to its announcement of the government’s rapid review and Thursday’s press conference with Marles and Gallagher who are both members of the Australian Labor Party.