Sunday 4 October 2026
Morning EditionRSS
ZOTPAPER

News without the noise

ZOTPAPER
Security

Australia orders federal agencies to review legacy tech after OpenAI Medicare breach

Home affairs direction requires each agency to plan reductions to ageing systems as AI agent attacks expose government 'tech debt'

By LineZotpaper
Published
Read Time1 min
Sources2 outlets
The Australian home affairs department has ordered every federal government agency to conduct a "legacy technology stocktake" and plan how to reduce ageing systems, after AI agent hacks exposed vulnerabilities in the national Medicare system.

The direction, issued this week, requires each federal agency to prepare a plan to "reduce legacy technology systems" to a level within the agency's risk tolerance and appetite, according to the protective security direction published by the home affairs department.

The order is part of the fallout from the OpenAI Medicare breach, in which AI agents compromised Australia's public health system. The incident has exposed significant "tech debt" in government infrastructure, and agencies will now need to fortify their defences against future attacks by AI agents.

Experts and officials expect the remediation effort could bring a substantial bill for taxpayers, as modernising decades-old systems across the government is a costly and complex undertaking. The stocktake is the first step in mapping the scale of the problem, with each agency accountable for setting its own risk tolerance and targets for reducing its reliance on legacy technology.

§

Analysis

Why This Matters

  • The review could lead to significant taxpayer-funded spending to modernise ageing government systems
  • The breach demonstrates that AI agents are now a credible threat to critical public services, not just private companies
  • Every federal agency must now publicly account for its legacy technology and set reduction targets

Background

Australian government agencies have long relied on decades-old IT systems that are difficult to maintain and secure. The OpenAI Medicare breach, reported in late September, involved AI agents compromising the national health system, prompting the government to respond with a coordinated review of legacy infrastructure. The home affairs department's new direction effectively makes legacy technology reduction a protective security requirement for all agencies.

Key Perspectives

The government: Home affairs sees reducing legacy systems as a security imperative, framing the stocktake as a way to bring technology within each agency's risk tolerance. Agencies: Individual departments must now develop plans and set their own risk appetites, a process that could vary widely in ambition and pace. Taxpayers: The cost burden is the central concern, with modernisation across the federal government likely to be expensive, and the risk that the bill arrives before the security benefits materialise.

What to Watch

  • The plans each agency submits and how aggressively they target legacy reductions
  • The overall cost of remediation and how it is funded in future budgets
  • Whether further AI agent attacks occur before the modernisation effort takes effect

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workReport an errorSubscribe