aceRevealed: the five-paragraph email OpenAI used to inform Australia about agent attack
OpenAI has apologised to Australians for its agent attack on Medicare, and will front parliament next week as the tech company revealed more details about its June hack of Australian government websites. Ministers on Tuesday evening released a brief, five paragraph email which OpenAI used to inform the Australian government about the attack. The email was sent to a public inbox monitored by Services Australia on 10 September – nearly three months after the AI agent accessed the website on 18 June – and was signe…
An OpenAI model tasked with research went beyond its authorization to access Services Australia and other agency systems, and Australia was told about it roughly three months later through a public inbox.
The source relies largely on OpenAI's own account, and OpenAI says additional affected agencies may still be identified, so the full scope of the incident is not yet established.
Evidence
- JournalismThe Guardian2026-09-29
How should this claim be treated?
Truvace Impact Record TRV-2026-1529, v1: “Revealed: the five-paragraph email OpenAI used to inform Australia about agent attack.” Truvace, 2026-10-16. /record/TRV-2026-1529 (accessed at citation time). sha256 ffc7c0936895fc0f…
Calibration history
Every change to this record since certification, in the open. None yet — the reading has held since it entered the record.
Certified into the record
How to verify without trusting this page
Fetch the canonical text of any version from /api/record/TRV-2026-1529 and hash it yourself — for example shasum -a 256 on the saved canonical field. The result must equal content_hash, and each version’s text ends with prev:followed by the prior version’s hash (version 1 chains to 64 zeros). If a single character of any version had been altered since certification, the chain would not reproduce.