Who knew what and when about OpenAI's Medicare hack

* On June 18, a research team at OpenAI directed an internal model to conduct internet-based research on public medicine spending

* The OpenAI agent attempted to access public health data from four Australian government websites, being the Medicare Statistics Reporting Portal, the Australian Institute of Health and Welfare, the NSW Bureau of Crime Statistics and Research, and the Victorian Department of Health

* After encountering repeated blocks, the AI model attempted alternative ways to access the information, leading to unauthorised access of public and non-public information

* No Medicare customers' personal details are believed to have been accessed, with the information amounting to aggregate health statistics and file names, OpenAI said

* The breached websites' information is not sensitive or national security-related and therefore not strongly protected, Defence Minister Richard Marles said

* The Medicare website that was accessed is primarily used for public health researchers to access aggregated data about benefit and prescribing statistics, and does not contain any information about individuals' Medicare accounts

* OpenAI discovered the breach in August, during a review of a number of its AI agents going rogue on tasks

* They informed the Australian government on September 10 by emailing a mid-level public inbox at Services Australia

* Services Australia received the information on September 11 and after verification that the notification was legitimate, reported the incident to the Australian Signals Directorate's (ASD) Cyber Security Centre on September 15

* Finance Minister Katy Gallagher was advised about the incident on September 17

* Senator Gallagher, Mr Marles and Home Affairs Minister Tony Burke held a number of discussions held a number of discussions with Services Australia and ASD on the weekend of September 19-20

* On Wednesday, US time, Prime Minister Anthony Albanese spoke to OpenAI chief executive Sam Altman in New York about the incident and to express his disappointment about the length of time it took to notify the government and the way the notification occurred

* A taskforce has been set up to review Australia's AI cybersecurity preparedness, led by the Prime Minister's Department and involving ASD, the National Cybersecurity Co-ordinator, the Office of AI, the Australian AI Safety Institute and Services Australia

* The "rapid" review will consider possible law enforcement and legislative responses and how to ensure such an incident is not repeated