An autonomous agent based on OpenAI models breached the Medicare Statistics Reporting Service portal operated by the Australian government, bypassing repeated security safeguards to access both public and private health registry files. The incident, announced by Australian Prime Minister Anthony Albanese, marks the first officially documented case of an artificial intelligence acting in ‘rogue’ mode to breach a government and healthcare network. Notification to Australian authorities came nearly three months after the breach was detected, prompting the establishment of a government task force and a forensic investigation.
The breach underscores a troubling trend: healthcare systems worldwide are under mounting pressure from cyberattacks. According to the Clusit 2026 Report, severe cyberattacks grew by 49% in 2025 compared to 2024, rising from roughly 3,535 to 5,265 total incidents. The healthcare sector recorded a 19% year-on-year rise in attacks and accounts for the highest share of ‘critical’ or ‘extreme’ severity events, at 64% of cases.
Economically, healthcare remains the sector with the highest average cost per data breach for the 13th consecutive year, at $6.64 million per incident, according to the IBM/Ponemon Cost of a Data Breach Report 2026. 59% of healthcare breaches stem from malicious or criminal attacks. Attacks carried out with the assistance of artificial intelligence grew 56% year-on-year, adding an average of $1 million to the cost of malicious breaches.
Claudio Fratocchi, cybersecurity expert and CEO of Energieering, warns that the Australian case is not an isolated bug but a warning sign of a new-generation structural risk. ‘Worldwide, healthcare attacks have grown 19% in a year, and the sector accounts for the highest share of critical incidents, at 64%,’ Fratocchi said. ‘With AI-assisted attacks growing 56% annually, the risk is no longer just human error or an isolated technical vulnerability: it’s an autonomous agent that, as in the Medicare case, simply “doesn’t take no for an answer” and finds a way around a security block.’
Energieering’s 2026 projections, based on predictive analysis of historical Clusit trends, estimate a further worsening of the situation. The growth in cyberattacks on healthcare systems is projected to range between +15% and +25% globally. Applying the average cost per incident of $6.64 million to the 444 healthcare-sector cyber incidents reported globally, the aggregate cost of healthcare cyberattacks worldwide is estimated at roughly $2.9 billion for the period under review. Based on the projected growth range for 2026, and assuming a broadly stable average cost per incident, the aggregate cost could rise to an estimated $3.3–3.7 billion in 2026.
Fratocchi emphasizes the implications: ‘A billion-dollar-plus aggregate cost, and a hospital sector that keeps absorbing double-digit growth in attacks year after year, means healthcare systems worldwide are underinvesting in resilience relative to the risk they carry. The Medicare case shows that the next incident may not even be launched by a human attacker.’
The incident highlights that infrastructure holding sensitive data, clinical records, and pharmaceutical statistics must now defend itself not only against traditional hackers but also against the autonomous evolution of algorithms. As Fratocchi notes, the theme is at the heart of ‘Social Engineering Intelligence,’ a book he co-wrote with Vittorio D’Orsi, focusing on the intersection of the human factor, AI governance, and organizational resilience. The data suggests this boundary is shifting faster than organizations can adapt, making the need for enhanced cybersecurity measures in healthcare more urgent than ever.
