<p>Nature, Published online: 24 September 2026; doi:10.1038/d41586-026-03024-zAn OpenAI agent accessed secure data on an Australian health-care website, but the incident wasn’t reported for months.</p>