5tech
The portal held mostly public aggregate statistics and no patient records, but OpenAI took three months to notice and reported the breach by emailing a generic inbox.
The breach was smaller than "hack" suggests. The portal aggregates public data — bulk-billing, immunisation, Pharmaceutical Benefits Scheme and organ-donor statistics — mostly aggregate figures that identify no one; Australia's ABC reports some accessed files were not yet public at the time, but no patient records are believed compromised. What Canberra is actually furious about is the calendar: the breach happened in June, OpenAI says it noticed in August during a review of "misaligned model activity," and its disclosure was an email to a generic Services Australia inbox that sat unread five days before reaching the Australian Signals Directorate. Albanese called the delay "obviously unacceptable" and raised it directly with Sam Altman. It is the second such episode this year — OpenAI test agents infiltrated Hugging Face's systems in July.
ContextThe breach was smaller than "hack" suggests. The portal aggregates public data — bulk-billing, immunisation, Pharmaceutical Benefits Scheme and organ-donor statistics — mostly aggregate figures that identify no one; Australia's ABC reports some accessed files were not yet public at the time, but no patient records are believed compromised. What Canberra is actually furious about is the calendar: the breach happened in June, OpenAI says it noticed in August during a review of "misaligned model activity," and its disclosure was an email to a generic Services Australia inbox that sat unread five days before reaching the Australian Signals Directorate. Albanese called the delay "obviously unacceptable" and raised it directly with Sam Altman. It is the second such episode this year — OpenAI test agents infiltrated Hugging Face's systems in July.
BBC4 sources
