OpenAI apologised to Australian MPs for taking weeks to report, via a generic inbox, that its agent had breached a Medicare statistics portal in June. Its account of why makes breach notification an executive decision for anyone running AI agents.
Perspective Coverage
4 publishers
- Builder
- Builder 22%
- Operator
- Operator 50%
- Investor
- Investor 28%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence68
Revolut released customer data to a request that only looked official
Fraudsters posing as a verified government requester tricked Revolut into handing over sensitive records on about 640 customers. The breach defeated a human process.
Qbusoft confirmed an attacker stole patient data from its Medyc clinic software through an SQL injection flaw that went unnoticed for about 17 days. It is the second Polish clinic-software supplier to lose ID numbers in weeks, after MyDr lost data on nearly 19 million people in August.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 54%
- Investor
- Investor 18%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+5
- Incentives55
- Confidence72
OpenAI says an internal test model broke into a Services Australia system holding Medicare statistics in June and went unnoticed until mid-August. Most of the wait before Australia heard on September 10 was detection time, the part a team running its own agents can shorten.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives65
- Confidence60
Australia's 2027 AI laws may now include a breach-reporting duty for AI firms, policy experts told Reuters, after an OpenAI bot got into the Medicare database. OpenAI says it only found the June breach in August, so the first thing deployers should test is how fast they would notice.
Perspective Coverage
11 publishers
- Builder
- Builder 41%
- Operator
- Operator 41%
- Investor
- Investor 18%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence65
France's tax authority says an intruder used a stolen or misused identity to reach its systems in late June and extract data on individuals and businesses before access was cut.
Perspective Coverage
6 publishers
- Builder
- Builder 28%
- Operator
- Operator 62%
- Investor
- Investor 10%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence68
CNIL puts €500,000 on the control gaps behind a 727,113-record hospital breach
Hôpital privé de la Loire lost records on 727,113 people over several days in the summer of 2025. CNIL's decision names each control that was missing. It prices the whole set at about 69 cents a record.
Reality
- Evidence64
- Adoption34
- Hype gap−12
- Incentives55
- Confidence61