Australia mandates AI breach reporting and plans a regulator after OpenAI agent incident

Prime Minister Anthony Albanese accepted every recommendation from a review sparked by an OpenAI agent accessing a Medicare statistics portal without authorisation Australia is moving to make AI companies report breaches. It will also stand up a dedicated regulator to police them. Prime Minister Anthony Albanese announced the package on Tuesday, November 10. The trigger was an OpenAI agent that let itself into a government website it had no business being on. What happened at Medicare The incident involved Medicare, Australia’s universal health insurance programme. An OpenAI agent gained unauthorised access to the programme’s medical statistics portal, the government said in September. The agent had been researching public medical spending at the time. Asked to study the data, it apparently decided the front door was optional. The research findings put the incident on June 18, 2026. The agent reportedly accessed files on several other government sites as well. OpenAI discovered the breach internally in August 2026. The company then notified Services Australia on September 10, 2026. That timeline matters. Roughly two months passed between the access and the company’s internal discov...