It is hard to find exact information on what happened the best source I've found is this ABC article: https://www.abc.net.au/news/2026-09-24/openai-agents-plotted...

It mentions swarm of ai agents coordinated to break into the Australian Institute of Health and Welfare (AIHW)

"Earlier this month, OpenAI confirmed Reuters reporting that its AI agents had used website DseWiki to communicate with each other, unbeknownst to them.

Archived versions of this website show more than a dozen OpenAI agents mentioned AIHW over 300 times on this website.

The logs show these AI agents were trying to access data about the average data spent on skin medicines by Victorian local government area.

One agent wrote on the message board: "Question ask January 2022 rolling 12 month average government cost per person for Dematologicals, Victoria LGAs. R1 Wodonga deadline passed; R2 Ballarat passed; R3 expected around 23:10 benchmark / 22:58 wiki time. Need exact data urgently.".

These attempts were initially blocked by cybersecurity provider Cloudflare, which is often used to block non-human traffic while allowing people to access webpages.

The logs show the agents shared information about how they tried to use proxies, screenshotting services and even to guess the file names to try and get around security."

▲

sebmellen 3 hours ago | parent | next [-]

This is such a strange scenario. I can't imagine what the labs were doing that made the agents try to find this information. The HuggingFace incident was relatively clear to track, but I wonder what the postmortem for this one will be!

Thank you for providing more details. The originally linked article was very light on information, so based purely on the comments that Albany's made, I think my conclusion was a fair one :)

	▲	SturgeonsLaw 2 hours ago \| parent [-]
		The DseWiki incident showed that OpenAI seems to ask its agents time-limited questions on geography-bounded statistics, tasks like finding the average wage of teachers in Wisconsin (made up example), so medical stats in an Australian state does seem to be in the same category of question. That said, it would be utterly unsurprising to learn that this was a misconfiguration in the website and it was serving stuff that it shouldn't have.

▲

epihelix 2 hours ago | parent | prev [-]

You missed the previous sentence form that article:

"Neither OpenAI nor the federal government have confirmed whether these were part of the same incident."

And a subsequent one:

"The German coding forum's logs do not show any reference to Medicare or Services Australia."

So it's really not clear at this point whether the DSEwiki logs are in any way related to the current incident. (That doesn't mean that they're not, of course.)

But even if this was related:

> "The logs show the agents shared information about how they tried to use proxies, screenshotting [sic] services and even to guess the file names to try and get around security."

This all suggests to me that the accessed files were not well-protected in the first place?

There is a lot of media hype around this incident, and that's making it very hard to determine how much "hacking" the OpenAI agents had to do here.