OpenAI's Sydney Apology Over the Medicare Access, Explained
OpenAI chief strategy officer Jason Kwon flew from San Francisco to Sydney to apologise in person to the Australian government after one of the company's AI agents accessed a Services Australia website without authorisation and obtained Medicare-related data. The Guardian
The incident was dated 18 June. OpenAI identified the system as Services Australia's Medicare Statistics Reporting Service. It said the access happened during training and evaluation, the testing phase when a lab checks what an agent can do. An agent is software that can visit websites and take actions on its own. That detail came in a company statement titled 'How we will do better for Australia'. OpenAI
Canberra was told by an unsigned email to a public departmental inbox. It ran to five paragraphs. The Guardian OpenAI has since apologised for the way it informed the government about the Services Australia incident.
Kwon was asked about that email at the hearing. He said OpenAI did not use AI to write it.
Sam Altman met Deputy Prime Minister Richard Marles face to face in San Francisco on 1 September. Kwon told the parliamentary hearing Altman was not aware of the incident before that meeting. That is now the company's formal position. Officials continue to ask who knew what inside OpenAI between June and September, and why the departmental inbox was treated as enough.
Kwon was scheduled to appear before Australia's Parliament on Tuesday to face questions about the company's AI. He used the appearance before the parliamentary inquiry on AI to apologise again to Australia. The company says it has 'work to do to rebuild trust' in Australia. The Guardian In Sydney, Kwon described the Medicare access as 'not super sophisticated' and said that with 'trusted access' partners can develop their cyber defences. Politico Australia launched an investigation after the agent hacked Medicare. The chair of the federal inquiry says OpenAI must explain action taken to stop AI hacking Australians' private data.
The broader context here is familiar from estimates. Departments rely on protocols for incident notification, escalation and ministerial briefing. An unsigned note to a general inbox bypasses those steps. It denies Services Australia, the Cyber Coordinator and ministers the clear record they need to assess scope, contain risk and inform the public. The fuss over who wrote the email shows how bruising the politics has become.
In my view, Kwon was sent to fix the second failure more than the first. Flying in the chief strategy officer is standard repair work in this town. It signals the company takes the relationship seriously without putting the chief executive in the witness chair. The language was picked for that job: contrition about process, narrow description of method, reassurance about future cooperation. The test is not the apology. It is whether OpenAI will accept verifiable guardrails for agent testing against live Australian government infrastructure, including pre-notification, logging and independent audit, and whether the inquiry can get that on the record.
