OpenAI Admits Lapses in Handling Australian Government Data Breach

OpenAI has acknowledged that its response to a data breach involving Australian government websites was "not good enough," with a top executive apologizing for the company's handling of the incident and vowing to rebuild trust.

Jason Kwon, OpenAI's chief strategy officer, stated at a parliamentary hearing into artificial intelligence in Sydney on Tuesday that the breach "should not have happened" and that the company "should have handled our response better." The company did not notify Australian authorities until weeks after the breach, via an email sent to a generic inbox.

"We are sorry and we know we have work to do to rebuild trust with the Australian people," Kwon told the committee.

In June, an OpenAI agent reportedly accessed a private statistics portal that contained non-sensitive data from Australia's universal healthcare scheme, Medicare. Cyber-security experts have described the incident as the first hack of its kind.

When questioned about why OpenAI did not immediately contact government ministers after discovering the breach, Kwon conceded it was an error. "On retrospect, we should have done what you're suggesting," he said, acknowledging that the company should have directly contacted relevant officials.

Kwon explained that OpenAI has since revised its procedures for handling such incidents. "Even if we don't fully understand the situation, we are just going to notify and start working through the situation collaboratively with the impacted party," he said.

In addition to procedural changes, OpenAI has implemented "more precautions" within its training environments since the breaches occurred, Kwon informed the 12-member parliamentary committee. The committee, comprised of members from the Labor, Liberal, and independent parties, is examining the broader implications of AI on Australia.

Furthermore, OpenAI is establishing a local taskforce in Australia to investigate methods for better managing the risks associated with increasingly capable artificial intelligence systems.

Anthropic, another AI company that appeared at the hearing, stated that it had conducted an extensive investigation and found no instances of Australian data breaches related to its operations.