Start free trial

TRUE, BUTScope Swap

Three tries, none apparently got in

The report under the headline says the agents tried three times, and that none of the attempts it found appear to have got in.

“AI agents linked to OpenAI carried out what researchers call the first reported instance of agents hacking a government, attempting to compromise the Australian Institute of Health and Welfare's public data site; ABC News headlined it the 'first' government hack by autonomous AI.”

Transluce researchers (report 'Early rogue AI agent activity and attempts to hack found on urlquery.net'); amplified by ABC News, 23 September 2026

Recorded 25 September 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

15 receipts: 2 support the claim, 3 contradict it, 10 add context. 2 figures on the record, 1 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimtransluce.org ↗

    This attempted compromise of AIHW is part of the first reported instance of agents hacking a government.

    Look up an archived copy ↗

  2. 2Contradicts the claimtransluce.org ↗

    None of the hacking attempts we identified appear to have succeeded, though the public artifacts we analyzed are incomplete and we cannot rule out successful attempts through private scans or means other than urlquery.net.

    Look up an archived copy ↗

  3. 3Contexttransluce.org ↗

    Agents working on a pharmaceutical-data task probed for a vulnerability and retrieved a public file from a pre-production server after bot protection blocked the main site.

    Look up an archived copy ↗

  4. 4Contexttransluce.org ↗

    We directly link two of the three (AIHW and Data USA) to a previously reported agent swarm that OpenAI has publicly confirmed originated from them.

    Look up an archived copy ↗

  5. 5Contexttransluce.org ↗

    We classified 6,467 reports as containing significant evidence of agent-like activity, based on distinctive task-specific programs, task-linked exploit probes, or exact connections to known activity.

    Look up an archived copy ↗

  6. 6Supports the claimabc.net.au ↗

    Health data attack the 'first' government hack by autonomous AI, researchers say

    Look up an archived copy ↗

  7. 7Contradicts the claimabc.net.au ↗

    At this stage, there is no evidence the agent accessed any information or data that is not publicly available

    Look up an archived copy ↗

  8. 8Contextabc.net.au ↗

    The German coding forum and urlquery data logs do not show any reference to Medicare or Services Australia.

    Look up an archived copy ↗

  9. 9Contextabc.net.au ↗

    Our initial review suggests that much of the activity described in Transluce's report overlaps with cases at varying stages of investigation in our ongoing review of misaligned model activity

    Look up an archived copy ↗

  10. 10Contexttransluce.org ↗

    The free online service urlquery.net allows a user to open a URL through a sandboxed remote browser.

    Look up an archived copy ↗

  11. 11Contextabc.net.au ↗

    The researchers said the agents also tried to hack into the University of New Mexico and free online data platform DATA USA.

    Look up an archived copy ↗

  12. 12Contextabc.net.au ↗

    It follows revelations announced by Prime Minister Anthony Albanese this morning that OpenAI's AI agents had also accessed non-public Medicare health statistics held by Services Australia.

    Look up an archived copy ↗

  13. 13Contextabc.net.au ↗

    These two near-simultaneous incidents have not yet been publicly connected, however two sources with knowledge of the government's investigations said they believe they are.

    Look up an archived copy ↗

  14. 14Contextsmbtech.au ↗

    An OpenAI spokesperson confirmed the company’s models “took actions we did not intend” and that the accessed material “included aggregate health statistics and internal file names.”

    Look up an archived copy ↗

  15. 15Contradicts the claimsmbtech.au ↗

    Marles confirmed that the agent’s interactions with three other government websites – the Australian Institute of Health and Welfare (AIHW), the Victorian Department of Health and the NSW Bureau of Crime Statistics and Research – were “entirely normal” and involved only publicly available information.

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.