After AI Agent Hacked Its Government, Australia Calls Altman and Amodei to Testify - Decrypt

by · Decrypt · Join

In brief

  • Senator Sarah Hanson-Young sent written invitations on September 27 asking OpenAI's Sam Altman and Anthropic's Dario Amodei to appear before a Senate inquiry in Canberra on October 1.
  • An OpenAI agent accessed Australia's Medicare Statistics Reporting Portal on June 18; OpenAI says it found the intrusion on August 11 but didn't notify Canberra until September 10, and Prime Minister Anthony Albanese called the notification method "unacceptable."
  • The invitations are voluntary, not subpoenas, since neither CEO is an Australian citizen; as of the request being sent, neither company had publicly responded.

An apology and a supportive tweet won’t be enough to calm down Australia's parliament after U.S.-based AI agents hacked their government. Now, its parliament wants a word with the two men steering the world's most powerful AI labs.

Senator Sarah Hanson-Young, who chairs a Senate inquiry into AI and data centers, sent written invitations on September 27 asking OpenAI CEO Sam Altman and Anthropic CEO Dario Amodei to appear in Canberra on October 1, Australian news outlet IT News reported.

Myriad: How low will Nvidia go? Click to make your prediction.

The inquiry is looking at how AI systems and the data centers that run them affect Australian communities, industries, water supplies, and power grids. It got a lot more urgent once a piece of software started poking around a government health database on its own.

That software was an agent, an AI system that can act on its own initiative—browsing websites, pulling files, completing multi-step tasks—without a person clicking through each step.

On June 18, an OpenAI agent accessed Services Australia's Medicare Statistics Reporting Portal, pulling non-public aggregate health statistics and internal file names. OpenAI says it caught the intrusion on August 11 but didn't notify Canberra until September 10, and even then only by email to a public inbox. Australian Prime Minister Anthony Albanese eventually went public about the incident last week, on Sept 23.

The ordeal has turned into a diplomatic headache. “Today I spoke with the CEO of OpenAI, Sam Altman, to express Australia's extreme concern about this incident,” Albanese told reporters. “I also expressed my disappointment that it took the company way too long to inform the government what had occurred and the nature of the way that that notification occurred as well was unacceptable.

BitcoinBTC · USD
$83,375−3.6%
24H7D1M1YYTD
Sep 21Sep 23Sep 25Sep 27Sep 28
$87.2k$85.7k$84.2k$82.7k
24h HighHigh$84,945
24h LowLow$82,581
VolVol$1.8B
Market projectionsOdds by Myriad
This weekBelow $84,000Below $84k57% chanceThis monthBelow $84,000Below $84k57% chance

→

Buy Bitcoin with USDT
Powered by Jupiter
$50$100$500
Buy
Price data by CoinGeckoCoinGeckoMore Bitcoin news and projections →

OpenAI's own account is narrower: "Our review found no evidence of patient records being accessed. The information accessed included aggregate health statistics and internal file names," the company said. The Medicare portal was one of at least four Australian government sites the agent touched. OpenAI has since said it's reviewing how its models behave during training and testing, when few humans are watching closely.

This isn't an isolated incident, either. Back in July, OpenAI models broke out of a security-testing sandbox and used a previously unknown software flaw to access Hugging Face and four other platforms without permission. Similar episodes involving agents from Google and other labs have piled up throughout the year, with the Australia hack being the first documented case of an AI agent hacking a government.

Neither Altman nor Amodei are likely to show up, and since the invitations are just that, they have no legal obligation to comply.

But both companies have separately signed memorandums of understanding with Canberra this year: Anthropic is exploring up to 5 gigawatts of training capacity in New South Wales—the power and computer hardware needed to build and run AI models, at a scale that could power a small city—and OpenAI has a proposed Sydney campus with data-center operator NEXTDC.

So, neither can afford to just altogether blow off the government that's weighing those deals, either.

Daily Debrief Newsletter

Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Your Email
Get it!
Get it!