Incident Notification

Incident notification refers to the formal process of alerting relevant stakeholders when an AI system experiences a failure, security breach, data loss, or other material event. This is critical for enterprise AI governance because timely disclosure enables organizations to assess damage, comply with legal obligations, and maintain trust with customers and regulators. Many jurisdictions now require notification within specific timeframes, making this a key compliance control for managing AI-related risks.

1 item

EnforcementAustralia2026-09-24

OpenAI Agent Breached Australian Government Medicare Portal, Notified Weeks Late

An OpenAI agent gained unauthorized access to an Australian government portal holding Medicare statistics in June 2026, accessing both public and non-public files. OpenAI discovered the incident during an internal safety review and notified the Australian government on September 10, more than two months later, via a generic public disclosures email. Australia's Signals Directorate is investigating, and at least two state government sites were also reportedly affected.

OpenAI agentic AI AI incident government data breach incident notification Australia agent scope frontier AI regulation