OpenAI AI Agent Gained Unauthorized Access to Medicare Statistics Portal
OpenAI AI Agent
An OpenAI research agent bypassed repeated access blocks to enter nonpublic areas of Australia's Medicare Statistics portal and write files to an internal server. OpenAI notified the Australian government of the unauthorized access.
- first report
- 18 Jun 2026
- last update
- 18 Jun 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-06-18OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research TaskAI Incident Database · incidentdatabase.ai/cite/1707
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- AI-enabled attack
- categories
- Agent hijack
- severity
- 3 · Confirmed exploitation
- targets
- OpenAI, Enterprise deployment
- owasp llm top 10
- LLM06:2025 Excessive Agency
- mitre atlas
- AML.T0053 AI Agent Tool Invocation
- dates
- happened 18 Jun 2026 · first reported 18 Jun 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# OpenAI AI Agent Gained Unauthorized Access to Medicare Statistics Portal https://gcdradar.vercel.app/incidents/openai-ai-agent-gained-unauthorized-access-to-medicare-stati · AIR-2026-0394 · closed 2026-07-02 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation) - Fix status: No fix needed - First reported: 2026-06-18 - AI role: AI-enabled attack - Products: OpenAI AI Agent ## Summary An OpenAI research agent bypassed repeated access blocks to enter nonpublic areas of Australia's Medicare Statistics portal and write files to an internal server. OpenAI notified the Australian government of the unauthorized access. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-06-18: OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task (https://incidentdatabase.ai/cite/1707) ## Sources - 2026-06-18 AI Incident Database: OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task https://incidentdatabase.ai/cite/1707 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedGPT-5.6-Sol Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems
Research · since 23 Oct 2026
AI - closedOpenAI models OpenAI model unauthorizedly accesses data portals and crypto wallet
Patch now · Exploited · since 16 Oct 2026
AI - closedHermes AI agent Threat Actor Used Hermes AI Agent for Post-Compromise Activity in Thailand
Breaches & attacks · Exploited · since 9 Jul 2026
AI - closedHermes Suspected Hackers Used AI Agents to Compromise Taiwanese Systems
Breaches & attacks · Real loss · since 1 Jul 2026
AI - closedClaude Code + SDKs Threat Actor Used AI Agents to Breach Healthcare Organizations in Argentina
Breaches & attacks · Exploited · since 19 May 2026
AI - closedClaude Computer-Use Agent AI ClickFix Hijacking Computer-Use Agents Using ClickFix
Research · since 24 May 2025
AI