Photo via Daily Mail

AI hackers could strike Australia again: Cyber expert's dire warning after Medicare breach exposes government failures

Read the original at Daily Mail ↗
Cite

Garbutt-Young, L. (2026, October 1). AI hackers could strike Australia again: Cyber expert's dire warning after Medicare breach exposes government failures. Daily Mail. https://www.dailymail.com/news/article-16177187/ai-hackers-australia-open-ai.html?ns_mchannel=rss&ns_campaign=1490&ito=1490

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

Daily Mail · collected 2026-10-01 · by Lucinda Garbutt-Young

Quick Summary

A cybersecurity expert warns that Australia's data remains vulnerable to artificial intelligence attacks following a recent breach at Medicare. Sam Spencer, founder of Aristotle Metadata, criticizes the national data commissioner’s office for its ineffective approach to cataloging government data sets, which he believes contributed to the breach. The Department of Home Affairs has issued new directives for federal departments to assess their older software and technology, but Spencer argues that this is insufficient without a more systematic and competitive approach to identifying and securing data sets across agencies.
Written by AI on 2026-10-01, from this article's own text only (the story summary below draws on all the coverage).

Story

📰 Australia Orders Cyber Stocktake After Hack
Technology · 2 article(s) covering the same event. See how they differ ↓

Compared with similar articles

This article reads leans left and hedges 8% of its claims. Each row says how that neighbour differs.
Evening Standard
Hedges 0 of 12 claims Outlet record 64/100
“The articles discuss different aspects of AI-related cyber threats without describing the same specific incident.”
ABC News (AU)
⚖️ Leans left Hedges 3 of 35 claims Outlet record 68/100
“Article A discusses the aftermath of an OpenAI-related breach and subsequent government measures, while Article B focuses on the political context leading up to an appearance by an OpenAI executive, mentioning the breach as part of that backdrop.”
The Globe and Mail
Hedges 2 of 15 claims Outlet record 52/100
“The articles describe different AI hacking incidents targeting Canada and Australia respectively.”
CBC News
Hedges 2 of 14 claims Outlet record 74/100
“The articles describe separate incidents involving AI attempts to hack different government websites in Canada and Australia.”
The Guardian
Hedges 1 of 8 claims Outlet record 66/100
“Article A discusses Albanese's announcement about the Medicare hack and his statement about acting in national interest, while Article B covers a cyber expert's warning following the breach and calls for improved government cybersecurity measures.”
ABC News (AU)
⚖️ Leans left Hedges 5 of 31 claims Outlet record 68/100
“While both articles discuss responses to OpenAI's Medicare data breach, they describe different aspects and reactions over time: Article A focuses on political parties' views about building data centers in Australia, while Article B presents a cyber expert's warning following the breach.”
Daily Mail
Hedges 0 of 22 claims Outlet record 68/100
“Article A discusses Deputy Prime Minister Richard Marles meeting OpenAI's Sam Altman days before the Medicare breach, while Article B focuses on a cyber expert warning about potential future AI attacks and government responses to the breach.”
The Sydney Morning Herald
Hedges 7 of 40 claims Outlet record 61/100
“The articles discuss related cybersecurity issues concerning Medicare data but describe different aspects and implications, not a single identical incident.”
The Sydney Morning Herald
Hedges 1 of 32 claims Outlet record 61/100
“Article A describes OpenAI's apology for hacking into Medicare, while Article B discusses a cyber expert's warning following the breach and subsequent government actions to improve cybersecurity.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
24
sentences that state something as happening or true
Uncertain
8%
2 of 24 hedged ("reportedly", "may", "according to")
Leaning
Leans left
of the writing, not the subject · beta estimate
Publisher signals
68/100
Daily Mail's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
2
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-01 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Daily Mail · 8757 article(s) · 21 correction(s) detected
Running correction rate · 21 correction(s)

Who wrote this

Lucinda Garbutt-Young
7 article(s) here · 1 carrying a prediction
🔮 Almost every Australian would save around $1,000 a year under tax changes proposed by the Greens that would be paid for by collecting 'rivers of gold' from gas and mining companies.
🔮 'I was also told this had occurred recently and prevented the vessel from sailing while investigations were ongoing,' she said. 'Even more disturbing are claims that footage from these cameras may have been uploaded online before the cameras were discovered.' The investigations come amid calls for the Australian Defence Force to overhaul its training programs in order to better combat internal sexual harassment. Attitudes within the Navy specifically would not shift until men fully understood the legal consequences of their behaviour and consent training went beyond 'window dressing' lawyer Adair Donaldson said.
🔮 It's above projected inflation of 2.8 per cent in 2026/27 and 2.4 per cent in 2027/28, according to the latest forecasts by the Reserve Bank of Australia.
🔮 One Nation will move into a Gina Rinehart-owned office and shuffle staffing in some of its biggest roles as it seeks to grow its presence across Australia.
🔮 The Department of Home Affairs on Wednesday issued a directive advising federal departments to examine their older software and technology, which will be assessed for shortcomings in order of priority.
🔮 Sydney Airport is safe despite investigations into air traffic control rostering and fatigue concerns, which might have contributed to near misses between aircraft, a federal minister says.
🔮 - See more Daily Mail on Google - save us as a Preferred Source Australian men who father children overseas could soon be forced to pay child support to mothers living abroad under sweeping Labor reforms aimed at cracking down on parents who dodge their responsibilities. Social Services Minister Tanya Plibersek will introduce legislation to parliament on Thursday designed to recover billions in unpaid child support, strengthen protections for victims of domestic violence, and stop former partners from exploiting loopholes in the system.
Also by Lucinda Garbutt-Young
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 7 articles by Lucinda Garbutt-Young →

Topics

Aristotle Metadata Australia Medicare The Department of Home Affairs the Department of Finance

Subjects

Spencer PERSON · 5× Medicare ORG · 4× Australia GPE · 2× Sam Spencer PERSON · 2× The Department of Home Affairs ORG · 2× AAP ORG · 1× Aristotle Metadata ORG · 1× Home Affairs ORG · 1× OpenAI ORG · 1× the Department of Finance ORG · 1×

Narrative

After the OpenAI hack, the Department of Home Affairs has asked departments to examine older software and technology Under national requirements, departments must enter mandatory answers to 10 questions about each data set they upload to the catalogue, including things about privacy and content.
framing: assertive · carried by 1 article(s) · first seen 2026-10-01
🔮 The Department of Home Affairs on Wednesday issued a directive advising federal departments to examine their older software and technology, which will be assessed for shortcomings in order of priority.

Claims (24 extracted, 2 hedged)

Australia's data remains at risk of artificial intelligence attacks unless a different approach is taken, an expert says, blaming a recent breach on the national data commissioner. asserted
expert → remain → commissioner
An OpenAI break-in to Medicare statistics prompted an urgent bolstering of government cyber systems. asserted
in → prompt → systems
The Department of Home Affairs on Wednesday issued a directive advising federal departments to examine their older software and technology, which will be assessed for shortcomings in order of priority. asserted
which → issue → priority
But Sam Spencer, who runs tech security company Aristotle Metadata, warned the edict was essentially an extension of an existing system that did not work. asserted
that → run → system
A national data commissioner's office was first established in 2022 after a series of data breaches. asserted
office → establish → breaches
It was ordered to help departments find and upload data sets to a national catalogue. asserted
departments → order → catalogue
Across four years, it only identified 500 data sets that were not already available on the open portal data.gov.au. asserted
that → identify → portal
The Medicare base accessed by the rogue AI agent did not appear to be one of them, Mr Spencer said. asserted
Spencer → access → them
He has been working to gather information on hundreds of government data sets and inform departments of privacy concerns, and went as far as to blame the Medicare breach on the commissioner's office. asserted
He → work → office
An expert says Australia remains at risk of AI attacks like the recent Medicare hack IT specialist Sam Spencer has questioned the government's approach to data security 'I would firmly look at the data commissioner, because they were responsible for cataloguing data,' he said. asserted
he → say → data
A spokesperson for the Department of Finance, where the data commissioner's office sits, told AAP data registration would not prevent further breaches. asserted
registration → sit → breaches
'The proposition that data registration can prevent cyber incidents is incorrect,' the spokesperson said. asserted
spokesperson → prevent → incidents
The catalogue of information does not assess data systems, or address the security of agency data, they said. asserted
they → assess → data
But Mr Spencer suggested it was impossible for the government to have a robust approach to data security without fully understanding what it held. uncertain
it → suggest → what
Things were likely to be missed, and taxpayer money could be used protecting platforms that actually had no information on them. uncertain
that → miss → them
Instead, Mr Spencer wanted to compel each agency to have a target number of data sets it must find and identify, to be updated monthly. asserted
it → want → sets
A competitive approach would ensure areas were not missed, and sensitive content was actually safe, he said. asserted
he → ensure → ?
After the OpenAI hack, the Department of Home Affairs has asked departments to examine older software and technology Under national requirements, departments must enter mandatory answers to 10 questions about each data set they upload to the catalogue, including things about privacy and content. asserted
they → ask → privacy
Mr Spencer's analysis found Home Affairs had only entered 90 per cent of the compulsory information that it should have. asserted
it → find → that
It had one of the lowest scores of any agency. asserted
It → have → agency
'They have come out and said everybody else has to find their legacy systems and put their foot down, but they haven't completed their mandatory questions. asserted
they → come → questions
How is that leading from the front?' Mr Spencer said. asserted
Spencer → lead → front
A Department of Home Affairs spokesperson said data protection was key to its work. asserted
protection → say → work
'The department takes its responsibilities in relation to both data accessibility and cyber security seriously and continues to make progress in each area,' they said. asserted
they → take → area
💬Give feedback
🕘History 🎫Support