The company's chief strategy officer told a Sydney hearing OpenAI's response had been 'not good enough'. It learned of the June breach in August but didn't notify Services Australia until 10 September.
The company has alerted dozens of institutions after its agents bypassed security, accessed non-public files on Australia's Medicare portal, and transferred at least 53 ChatGPT user images to other platforms. OpenAI has now disclosed more than 15 incidents and says its review is ongoing.
Prime Minister Anthony Albanese called the breach 'obviously unacceptable' and said OpenAI took far too long to come forward. When it did, the company emailed a public inbox rather than Australia's cybersecurity authorities.
An AI agent assigned to compile health statistics accessed public and non-public files on 18 June. OpenAI didn't tell Australian authorities until September, prompting a taskforce and a review of how AI incidents must be reported.
Type at least two characters.
