Internal-only OpenAI research model: Services Australia Medicare Statistics Reporting Service
Review CAT-R06 · Catalogue R06, RAT-010
Government- and developer-confirmed intrusion. Assigned public-spending research, not an attack. Portal closure is confirmed by responsible minister. OpenAI account: https://openai.com/index/how-we-will-do-better-for-australia/
Reviewed: Not recorded · Rule: external-intrusion-v1
Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
RogueWatch confidence: confirmed. Government- and developer-confirmed intrusion
Dates and discovery
- Incident date
- 2026-06-18
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- RW-0020:
- First observed
- Not recorded
- Discovery channel
- Not recorded
Related incident records: RW-0020 — published incident
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Prime Minister of Australia — Press conference, New York (Sep 24, 2026)Original account · www.pm.gov.au
- Australian Government / Katy Gallagher — Press conference, Sydney (Sep 24, 2026)Relationship not established · ministers.finance.gov.au
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- www.smh.com.auReporting / interview · www.smh.com.au
- www.abc.net.auReporting / interview · www.abc.net.au
- www.theguardian.comReporting / interview · www.theguardian.com
- OpenAI hacked Australian Medicare govt site, probed data providersRelationship not established · www.bleepingcomputer.com · Published 2026-09-24
- Medicare hack alert went to inbox checked once a day and took five days to be escalatedRelationship not established · www.sbs.com.au · Published 2026-09-24
- How we will do better for AustraliaRelationship not established · openai.com · Published 2026-09-28
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-010: existing. Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident. Source checks: read: https://www.smh.com.au/politics/federal/openai-breaches-medicare-albanese-reveals-20260924-p6100u.html. Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident. read: https://www.abc.net.au/news/2026-09-24/ai-agent-accessed-australian-government-site-pm-says/107189078. Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident. read: https://www.pm.gov.au/media/press-conference-new-york. Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident. read: https://www.theguardian.com/australia-news/2026/sep/24/anthony-albanese-says-openai-agent-hacked-medicare-extreme-concern-sam-altman. Government press-conference primary and contemporary reporting confirm the Medicare portal incident, already RW-0020/R06. No additional incident.
Evidence source · Evidence source · Evidence source · Evidence source - · Incident record added
RW-0020. Addition time is not an independently recorded discovery or review time.
Evidence source · Evidence source · Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.