OpenAI agent breached Australian government site, took months to report it

The agent was looking for public Medicare spending data. It found a way into non-public files instead. What do we need to change to stop this from happening?