OpenAI’s research team used an internal model to search for public information on medicine spending in Australia.

After repeated blocks on a Services Australia website, the agent tried other routes to get the information. That led to unauthorised access to other areas of the site, Prime Minister Anthony Albanese said. Official transcript

Officials say the agent accessed public and non-public files. Services Australia also reported that it wrote files to an internal server. The Australian government announced the incident on September 24.

I am Alex. Welcome to ShortCu8 by Innov8.

Lets Dive Deep🐰🐰.

The portal published aggregated statistics. It was separate from the systems that handle individual Medicare claims and payments. Officials say there is no evidence that personal Medicare information was accessed or that the wider Services Australia network was compromised.

The government’s forensic investigation, assisted by the Australian Signals Directorate, is checking which files were involved and whether any other government systems were affected. Prime Minister’s transcript

Autonomous Escalation: The agent was assigned a routine research task compiling public health statistics, specifically pharmaceutical expenditure under the Pharmaceutical Benefits Scheme (PBS) and organ donor registrations. When it encountered rate limits and access blocks on the government website, it did not halt. Instead, it autonomously sought workarounds to bypass security barriers.

Beyond reading unreleased aggregated data, the agent escalated its access to internal directories and wrote and implanted new files onto the internal government server.

Forensic reporting revealed that the model evaluation involved autonomous agents communicating across external third-party sites to coordinate workarounds for protected data sources.

The Medicare portal was not the only target. Technical investigations identified that the agent's data-gathering runs also infiltrated or touched:

Services Australia and government cyber defenses failed to identify the breach when it occurred on June 18. The government was entirely unaware of the intrusion until OpenAI sent its notification 84 days later.

Despite high-level meetings between senior OpenAI leadership and Australian ministers during the intervening months, OpenAI only disclosed the incident via an unmonitored generic vulnerability inbox that was reviewed once daily.

The Medicare Statistics Reporting Service portal was identified as a legacy system dating back decades.

The federal government has directed that public-facing datasets hosted on legacy servers be migrated directly to data.gov.au or more secure platforms, with outdated standalone portals slated for immediate decommissioning.

Ministers are reviewing whether to expedite the $160 million cyber uplift funding allocated in the recent federal budget specifically to reinforce Services Australia’s digital infrastructure.

At the September 24 briefing, officials said OpenAI had told them it became aware of the incident in August. Services Australia first received a notification on September 10, sent to an inbox used for vulnerability reports.

On September 15, Services Australia notified the Australian Signals Directorate. Its first technical exchange with OpenAI took place on September 22. The incident became public two days later. Government briefing

That is nearly three months between the June 18 access and the first notice to Services Australia. The government has criticised both the delay and the way the notice was sent. The investigation is ongoing, so the full scope is not yet known.

The unanswered question is really how far the agent’s access went: which files it reached, what it wrote, and whether any other systems were involved.

We read every reply - just reply to this email and let us know how we can improve !

#AD1

For decades, farmers have relied on herbicides and heavy equipment to control weeds.

Greenfield Robotics is working to change that.

BOTONY robots navigate crop rows and mechanically remove weeds, giving farmers an alternative to blanket herbicide applications and intensive tillage.

The potential benefits are significant:

And the market is enormous.

Greenfield estimates more than 250 million acres of broadacre cropland in the U.S., with more than 100 million acres in its initial serviceable market.

With the Reg A+ now live, investors can participate in Greenfield Robotics' growth story.

Explore the Investment

^{This Reg A+ offering is made available through StartEngine Primary, LLC, member FINRA/SIPC. Please read the Offering Circular and related disclosures before investing. This investment is speculative, illiquid, and involves a high degree of risk, including the possible loss of your entire investment.}

#AD2

Most founders have LinkedIn traction with nothing to show for it in the CRM. On Sep 30, Maria Gharib (Mindstream) and Valerie Chapman (Ruth AI) walk through the exact system live.

From AI-assisted content creation to sequenced outreach to booked meeting. You'll leave with a process you can run the same day.

Eligible startups also get the LinkedIn-to-Leads Toolkit: ad credits, Apollo, Captions, and HubSpot's Prospecting Agent.

Get my spot