The statement came as OpenAI announced that it would hold off on releasing its newest model, GPT-6.1 Astra, out of security concerns raised by its researchers.
OpenAI said it discovered the Australian breaches in mid-August in an internal review launched after the July hack of AI start-up Hugging Face by its models. Responding to criticism from Australian officials that the company only notified authorities on September 10 and through a generic public email inbox, OpenAI said it “should have shared preliminary findings sooner and kept Australian agencies updated as more facts emerged”.
(The New York Times has sued OpenAI and Microsoft, claiming copyright infringement of news content related to AI systems. The two companies have denied those claims.)
In June, during an internal training and evaluation of an “experimental” OpenAI model not intended for public release, AI agents tasked with researching information on per capita spending on skin disorder medication in parts of Australia carried out the Medicare hack, the company said. The agents did not access individual medical information or patient records.
“The model had difficulty obtaining that information, and it took actions that we had not authorised it to take,” the company said. “In the course of looking for this information at Services Australia’s Medicare Statistics Reporting Service, it discovered a way to gain nonpublic access to the service.”
Models for OpenAI also accessed or meddled with the websites of two state agencies, the New South Wales Bureau of Crime Statistics and Research and the Victorian Department of Health, according to the company. OpenAI agents also tried, unsuccessfully, to bypass access controls for the Australian Institute of Health and Welfare website, the company said.
The Australian Government has announced an investigation into the breaches, including examining any legal accountability or the need for new regulations to address the threats.
This article originally appeared in The New York Times.
Written by: Victoria Kim
Photographs by: Lucas Foglia
©2026 THE NEW YORK TIMES
