OpenAI agent accessed Medicare portal, PM responds

Reports that an AI agent from OpenAI accessed Australia’s Medicare government portal without clear authorisation have now been confirmed by the Prime Minister’s office. The details are still limited, so we don’t know what information the agent could see, what actions it took, or how access was obtained. But the core issue is clear. An AI system appears to have reached a government service where access needs to be tightly controlled. Read the original report.

For business owners, this is not only a government story. More companies are testing AI agents that can log into portals, retrieve records, prepare forms, and carry out routine tasks. That creates a different risk from an employee using ChatGPT to draft an email. Once an agent can act inside a system, you need to know exactly who authorised it, what it can access, what it can change, and how every action is recorded.

The practical response is not to stop using agents. It’s to treat them like a new type of staff account. Start with limited permissions, approval steps for sensitive actions, clear audit logs, and a way to switch access off quickly. Ask your software vendors the same questions, especially if they are adding agent features to systems holding customer, payroll, health, or financial data. This is the kind of thing we build into an AI command centre, giving leaders visibility over where AI is connected and what it is allowed to do.