{"id":919141,"date":"2026-10-03T14:12:19","date_gmt":"2026-10-03T14:12:19","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/919141\/"},"modified":"2026-10-03T14:12:19","modified_gmt":"2026-10-03T14:12:19","slug":"openai-says-its-review-into-hacks-including-on-australian-government-sites-is-costing-500000-a-day-openai","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/919141\/","title":{"rendered":"OpenAI says its review into hacks, including on Australian government sites, is costing $500,000 a day | OpenAI"},"content":{"rendered":"<p class=\"dcr-1s160rg\">OpenAI says its review in response to the Medicare and Hugging Face agent attacks is costing the company more than US$500,000 per day, as it deploys AI to examine data that would take a human 66m years to read.<\/p>\n<p class=\"dcr-1s160rg\">The company has warned the review is ongoing, and more organisations may be informed they\u2019ve been targeted in the near future.<\/p>\n<p class=\"dcr-1s160rg\">On Friday evening, <a href=\"https:\/\/www.theguardian.com\/technology\/2026\/oct\/02\/openai-disclose-another-hack-on-government-department-in-australia\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">OpenAI revealed<\/a> agents had hacked into a New South Wales government website in June and accessed historical non-public data on bushfires without authorisation.<\/p>\n<p class=\"dcr-1s160rg\">It is the <a href=\"https:\/\/www.theguardian.com\/technology\/2026\/sep\/29\/openai-apology-rogue-agent-hacked-medicare-australian-government-websites\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">sixth government website in Australia<\/a> to be notified by the AI giant since last month of agent activity on their services, after the prime minister, Anthony Albanese, <a href=\"https:\/\/www.theguardian.com\/technology\/2026\/sep\/24\/openai-agent-hacked-medicare-australia-what-we-know-so-far-ntwnfb\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">announced OpenAI\u2019s agents<\/a> had hacked into Services Australia\u2019s Medicare statistics portal.<\/p>\n<p class=\"dcr-1s160rg\">The reason for the delay compared to the revelation of the Medicare attack is due to the sheer volume of data OpenAI needs to review.<\/p>\n<p class=\"dcr-1s160rg\">In a blog post <a href=\"https:\/\/openai.com\/hugging-face-incident-and-misalignment\/\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">this week<\/a> the company revealed the large amount of work involved in reviewing its agents\u2019 activity.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI said it has to review 50 petabytes of data \u2013 roughly 50m gigabytes.<\/p>\n<p><a data-link-name=\"standard link button Primary\" data-spacefinder-role=\"inline\" data-ignore=\"global-link-styling\" href=\"https:\/\/www.theguardian.com\/email-newsletters?CMP=copyembed&amp;CMP=emailbutton\" class=\"dcr-rh233e\" rel=\"nofollow noopener\" target=\"_blank\">Sign up for the Breaking News Australia email<\/a><\/p>\n<p class=\"dcr-1s160rg\">\u201cWe\u2019re working back through the records month by month, looking for potential unintended activity beyond the cases we\u2019ve already found,\u201d the company said.<\/p>\n<p class=\"dcr-1s160rg\">\u201cTo put that in perspective, if that were all plain English text, it would take one person about 66 million years to read it at 240 words a minute, reading nonstop without ever sleeping or taking a break.\u201d<\/p>\n<p class=\"dcr-1s160rg\">The company is searching records for where models accessed and changed websites, or took actions involving passwords, application programming interface (API) access or other sensitive credentials.<\/p>\n<p class=\"dcr-1s160rg\">AI is being used to help sift through the records, and it was costing the company more than half a million US dollars per day to go through. OpenAI said it also plans to increase its computing power as the process is refined.<\/p>\n<p class=\"dcr-1s160rg\">As of late last month, more than 100 organisations had been notified of having being targeted by OpenAI\u2019s agents, but the company said notifying an organisation does not mean private information was accessed or that their system was compromised.<\/p>\n<p><a data-ignore=\"global-link-styling\" href=\"#EmailSignup-skip-link-14\" class=\"dcr-76akua\">skip past newsletter promotion<\/a>Free newsletter |When needed<\/p>\n<p class=\"dcr-vf9hps\">Sign up to Breaking News Australia<\/p>\n<p class=\"dcr-djbwnz\">Get the most important news as it breaks<\/p>\n<p><img src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/10\/1791036739_480_2998.jpg\" alt=\"\" loading=\"lazy\" decoding=\"async\" class=\"dcr-gx9601\"\/><\/p>\n<p id=\"EmailSignup-skip-link-14\" tabindex=\"0\" aria-label=\"after newsletter promotion\" role=\"note\" class=\"dcr-76akua\">after newsletter promotion<\/p>\n<p class=\"dcr-1s160rg\">OpenAI said it expects to find more cases and notify more organisations about events that may have occurred months ago.<\/p>\n<p class=\"dcr-1s160rg\">Organisations will be informed privately if they need to investigate and address potential security issues, and OpenAI has said it will publicly report findings about agent behaviour and identified weaknesses in safeguards for the broader AI sector.<\/p>\n<p class=\"dcr-1s160rg\">\u201cWe err on the side of notification when our models\u2019 activity exposes a potential security vulnerability, even in cases where it is unclear if the information accessed was intended to be public, so the organization can investigate and take appropriate action,\u201d OpenAI said.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI discovered the latest NSW government website breach on Tuesday, and informed the state government and the Australian Signals Directorate after a 48-hour review.<\/p>\n<p class=\"dcr-1s160rg\">The Medicare breach has prompted the Australian government to require departments and agencies to undertake <a href=\"https:\/\/www.theguardian.com\/australia-news\/2026\/oct\/03\/openais-medicare-attack-has-exposed-australias-tech-debt-fixing-it-could-bring-a-big-bill-for-taxpayers\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">a stocktake of legacy technology<\/a> to reduce the number of ageing systems within government and reduce the cybersecurity risk they may present in the event of an AI agent attack.<\/p>\n<p class=\"dcr-1s160rg\">Executives from OpenAI, Anthropic, Microsoft and Google will front a joint parliamentary committee on artificial intelligence in Sydney on Tuesday.<\/p>\n","protected":false},"excerpt":{"rendered":"OpenAI says its review in response to the Medicare and Hugging Face agent attacks is costing the company&hellip;\n","protected":false},"author":2,"featured_media":919142,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[62,276,277,49,48,61],"class_list":["post-919141","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-ca","tag-canada","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/919141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=919141"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/919141\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/919142"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=919141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=919141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=919141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}