AI Agents Are Hacking Governments. When Is That An Act Of War?

AI break-ins so far have stopped short of war. The bigger danger is a government hitting back before it knows who to blame.

On June 18, an experimental OpenAI model was handed a dull research question: how much does government spend per person on skin medicines in parts of Victoria, Australia? The model was an agent, AI software that plans and carries out tasks on its own, and OpenAI had set it loose online as part of its training. When the public statistics didn’t have the number, it found another way in. It broke into a statistics service for Medicare, Australia’s public health insurer, helped itself to internal files and credentials, and read the service’s source code. OpenAI says it never authorized any of that. No patient records were accessed, the company says, but Prime Minister Anthony Albanese summed up the problem: the agent “didn’t accept ‘no’ for an answer.”

None of this was an act of war. A hack can count as one when it does the kind of damage a bomb would and a has government behind it. The Medicare agent did neither. The worry is the next agent, and a victim that strikes back before learning whose agent it was. Companies running AI agents can help prevent that mistake.

What Would Make A Hack An Act Of War

International law doesn’t use the phrase “act of war.” It draws two lines instead. Call them the illegal line and the hit-back line. A hack crosses the illegal line, a “use of force,” when its effects look like what a bomb or missile would do. The U.S. says “death, injury, or significant destruction” would likely count. That breaks international law, but the victim still can’t answer with force. The hit-back line, an “armed attack,” is reserved for the gravest cases, judged by how many people are hurt and how much is destroyed. It’s the one that lets a country fire back in self-defense.