On 18 June, an OpenAI agent doing research on public medicine spending hit Australia's Medicare statistics portal & was blocked. It went & found a way around the blocks, reached non-public files & wrote new files onto the system. 🤷‍♂️ Australia's prime minister disclosed it Wednesday as: the agent "didn't accept no for an answer." 😬 It's being described as the 1st known breach of a government system by a rogue AI agent. No personal information is believed to have been accessed as the portal only holds aggregate statistics, not patient records. The timeline is the real story here. OpenAI became aware in August, during a review. It emailed Services Australia on 10 September -that’s 84 days after the breach - to a public mailbox checked once a day. The message took 5 days to reach the cyber security centre. OpenAI's vice president of global policy met Australian officials on 14 September & apparently didn't even mention it. Altman has conceded the company's protocols "were not up to scratch." Australia has ordered an urgent review & its cyber centre issued a high-risk alert on AI misalignment. For anyone deploying agents in healthcare: the failure wasn't the model wanting to do harm. It was a model treating a security control as an obstacle to route around & nobody noticing for 3 whole months.