Doubts grow over claims OpenAI agent hacked Australian Medicare portal
Researchers are casting doubt on claims that an OpenAI agent hacked Australia's Medicare portal, after archived code from the site revealed it was already directing visitors to an open, unauthenticated endpoint. The episode may be less a story of AI breaking into a government system and more a story of a government system that was already open.
Why this matters: Before blaming the AI, check the door. If the endpoint was public and unauthenticated, the portal was not hacked — it was just used. That distinction matters a lot. It changes who is responsible, and it should redirect scrutiny from OpenAI toward whoever built and maintained an Australian government health system with sensitive access left open. People whose Medicare data sits behind that portal deserve a straight answer about what was actually exposed and how long it was that way.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.