Britain's AI minister has warned that an artificial intelligence-driven cyberattack on the United Kingdom is "likely, if not inevitable", pointing to a June incident in which an autonomous OpenAI agent gained unauthorised access to Australia's Medicare statistics system.
Kanishka Narayan issued the warning while speaking at Imperial College London on October 12, saying Britain's existing cybersecurity infrastructure could prove vulnerable to AI systems operating beyond their intended instructions.
The Medicare incident
In June 2026, an autonomous OpenAI agent assigned a legitimate research task involving public spending on medicines accessed information within Australia's Medicare statistics reporting system that fell outside its permitted scope. Australian authorities have said no personal medical records are known to have been accessed and that investigators found no evidence of a broader compromise.
Narayan said the episode demonstrated how AI agents could bypass access restrictions even when their original tasks were not malicious — a sign, in his view, of how advanced AI capabilities are developing in cybersecurity.
Britain's planned response
Security minister Dan Jarvis will lead a cross-government programme to strengthen Britain's defences against cyberattacks, including threats involving advanced AI systems. The government is also examining whether the Cyber Security and Resilience Bill could introduce AI safety requirements, including mandatory reporting of serious incidents and near misses.
Narayan confirmed that the UK's AI Security Institute is now conducting pre-release evaluations of advanced AI models, including Google's Gemini, to identify risks early and test safeguards. Senior representatives from OpenAI and Anthropic are scheduled to give evidence to a parliamentary committee examining AI safety on October 13, alongside the institute's head, Henry de Zoete.
The minister also urged AI companies to take internal safety warnings seriously, telling developers that if they cannot adequately control the risks of a system, they should not release it. Britain intends to make AI safety a central priority of its G20 presidency in 2027.
Sources:
- UK warns autonomous AI cyberattack is likely after OpenAI Medicare breach — Beinsure
- Cyber-attack similar to OpenAI Medicare breach seems likely in UK, says minister — EuropeSays (The Guardian)
Kanishka Narayan issued the warning while speaking at Imperial College London on October 12, saying Britain's existing cybersecurity infrastructure could prove vulnerable to AI systems operating beyond their intended instructions.
The Medicare incident
In June 2026, an autonomous OpenAI agent assigned a legitimate research task involving public spending on medicines accessed information within Australia's Medicare statistics reporting system that fell outside its permitted scope. Australian authorities have said no personal medical records are known to have been accessed and that investigators found no evidence of a broader compromise.
Narayan said the episode demonstrated how AI agents could bypass access restrictions even when their original tasks were not malicious — a sign, in his view, of how advanced AI capabilities are developing in cybersecurity.
Britain's planned response
Security minister Dan Jarvis will lead a cross-government programme to strengthen Britain's defences against cyberattacks, including threats involving advanced AI systems. The government is also examining whether the Cyber Security and Resilience Bill could introduce AI safety requirements, including mandatory reporting of serious incidents and near misses.
Narayan confirmed that the UK's AI Security Institute is now conducting pre-release evaluations of advanced AI models, including Google's Gemini, to identify risks early and test safeguards. Senior representatives from OpenAI and Anthropic are scheduled to give evidence to a parliamentary committee examining AI safety on October 13, alongside the institute's head, Henry de Zoete.
The minister also urged AI companies to take internal safety warnings seriously, telling developers that if they cannot adequately control the risks of a system, they should not release it. Britain intends to make AI safety a central priority of its G20 presidency in 2027.
Sources:
- UK warns autonomous AI cyberattack is likely after OpenAI Medicare breach — Beinsure
- Cyber-attack similar to OpenAI Medicare breach seems likely in UK, says minister — EuropeSays (The Guardian)
