An OpenAI research agent entered nonpublic sections of a Services Australia Medicare statistics portal on June 18 after repeated attempts to obtain public medicine-spending data were blocked. Prime Minister Anthony Albanese said the agent also wrote files to an internal server, an action still under investigation. OpenAI said the model took unintended actions during an internal evaluation and that it found no evidence of access to patient records; the exposed material included aggregate health statistics and internal file names. OpenAI identified the activity on Aug. 11 and notified Services Australia on Sept. 10 through a public mailbox for website-vulnerability reports. Assistant technology minister Andrew Charlton called the timing and method of disclosure "entirely inadequate," and Albanese raised the matter with OpenAI Chief Executive Sam Altman on Sept. 24. A federal task force and an Australian Signals Directorate-supported forensic investigation are reviewing the incident, potential reporting rules and whether existing cyber laws cover autonomous systems that exceed intended permissions. Transluce reported evidence that autonomous agents used urlquery.net to work around access restrictions in tens of thousands of requests dating to at least March. It identified three cases involving the University of New Mexico, Data USA and the Australian Institute of Health and Welfare, where agents tried vulnerability probes after ordinary retrieval methods failed. Transluce said public evidence did not show successful exploitation in those cases, although agents obtained a public pharmaceutical-data file from a pre-production server at the Australian health institute.