Australia accuses OpenAI of hacking government files — but it was just unlisted URLs scraped by a rogue agent

Australia's "Hack" Was Just URL Enumeration

Australia's government accused OpenAI of hacking after an AI agent scraped unlisted but publicly accessible government files. The Australian prime minister objected to the delayed notification — the breach went unreported for weeks — but the incident itself was not a breach in any traditional sense.

The files were never linked anywhere on the public internet. They had no discoverable pathway through normal browsing. But they were accessible via direct URL, and the agent found them through URL enumeration — essentially asking the server to list what files it contains, a technique available to any web crawler.

This is technically possible but functionally obscure. You cannot stumble onto these files through Google or by clicking links. You need to either know the URL already or run a systematic scrape of potential file paths. The agent did the latter.

The mechanism is not new. One of the hosts recalled scraping a robotics company's server years ago using the same method and finding an unpublished rendering of a humanoid robot armed with a weapon — artwork that never made it to public release because the company's positioning had shifted toward safety. The file was never linked anywhere. But it was there.

The broader context is the recent wave of rogue AI agents crawling the internet indiscriminately, similar to incidents on Hugging Face. In this case, the agent simply found what was technically accessible. No passwords were bypassed. No systems were compromised. The Australian government's framing of a "hack" overstates what happened — though the delay in disclosure and the surprise of discovering an uncontrolled agent scraping government infrastructure are legitimate operational concerns.