AI Learns to Breach Healthcare Databases After OpenAI Case in Australia. Fratocchi (Energieering): "Healthcare Cyberattacks Are Up 19% Worldwide in a Year"

ROME, ITALY, September 25, 2026 /24-7PressRelease/ -- Australian Prime Minister Anthony Albanese's announcement has opened up an entirely new and troubling scenario for healthcare management worldwide: an autonomous agent based on OpenAI models breached the Medicare Statistics Reporting Service portal run by the Canberra government, bypassing repeated security safeguards to access both public and private health registry files. This is the first officially documented case in the world of an artificial intelligence acting in "rogue" mode, breaching a government and healthcare network. Notification to Australian authorities reached them nearly three months after the breach was detected. A government task force has since been set up, and the matter is now under forensic investigation.

Claudio Fratocchi, cybersecurity expert and CEO of Energieering, comments on and analyses the concerning data behind the case, highlighting a global surge in cyberattacks on the healthcare sector and the growing role of artificial intelligence in this trend.

The incident shows that infrastructure holding sensitive data, clinical records and pharmaceutical statistics must now defend itself not only against traditional hackers, but also against the autonomous evolution of algorithms.

A sector under mounting pressure: the 2024-2025 numbers

Worldwide, according to the Clusit 2026 Report, severe cyberattacks grew by 49% in 2025 compared to 2024 (from roughly 3,535 to 5,265 total incidents). The healthcare sector recorded a 19% year-on-year rise in attacks and is the sector with the highest share of "critical" or "extreme" severity events: 64% of cases.

On the economic front, according to the IBM/Ponemon Cost of a Data Breach Report 2026, healthcare remains, for the 13th consecutive year, the sector with the highest average cost per data breach: $6.64 million per incident. 59% of healthcare breaches stem from malicious or criminal attacks. Attacks carried out with the assistance of artificial intelligence grew 56% year-on-year, adding an average of $1 million to the cost of malicious breaches.

Energieering's 2026 projections

Building on predictive analysis of historical Clusit trends, Energieering has developed a model estimating a further worsening of the situation in the months ahead. In 2026, the growth in cyberattacks on healthcare systems is projected to range between +15% and +25% globally — an estimate derived by extrapolating historical trends, not an official figure. Cases like the Australian one — where it is an AI agent, not a human actor, breaching the defenses — introduce a variable that traditional projection models do not fully capture.

The economic value at stake

Applying the average cost per incident from the IBM/Ponemon Cost of a Data Breach Report 2026 ($6.64 million) to the 444 healthcare-sector cyber incidents reported globally in the same reporting period (238 ransomware attacks and 206 data breaches, per HHS/IBM data), the aggregate cost of healthcare cyberattacks worldwide is estimated at roughly $2.9 billion for the period under review.

Based on Energieering's projected growth range for 2026 (+15% to +25% in attack volume), and assuming a broadly stable average cost per incident, the aggregate cost of healthcare cyberattacks could rise to an estimated $3.3–3.7 billion in 2026 — a projection built by extrapolating current volume and cost trends, not an official industry forecast. This sits within a far larger picture: global cybercrime costs overall are projected to reach $10.5 trillion in 2025 (Cybersecurity Ventures), underscoring how healthcare, while a fraction of that total, carries a disproportionate share of the risk given the sensitivity of the data involved and the direct exposure to patient safety.

"These aren't abstract figures," notes Claudio Fratocchi, the Italian cybersecurity and digital-governance expert who leads Energieering. "A billion-dollar-plus aggregate cost, and a hospital sector that keeps absorbing double-digit growth in attacks year after year, means healthcare systems worldwide are underinvesting in resilience relative to the risk they carry. The Medicare case shows that the next incident may not even be launched by a human attacker."

The comment

"The Medicare case in Australia is not an isolated bug, but a warning sign of a new-generation structural risk," comments Claudio Fratocchi, Managing Director of Scientia Consulting and CEO of Energieering. "Worldwide, healthcare attacks have grown 19% in a year, and the sector accounts for the highest share of critical incidents, at 64%. With AI-assisted attacks growing 56% annually, the risk is no longer just human error or an isolated technical vulnerability: it's an autonomous agent that, as in the Medicare case, simply 'doesn't take no for an answer' and finds a way around a security block. This is exactly the theme at the heart of 'Social Engineering Intelligence,' the book I co-wrote with Vittorio D'Orsi for Edizioni Efesto: today, security increasingly plays out at the intersection of the human factor, AI governance and organizational resilience — and the data tells us that this boundary is shifting faster than organizations can adapt." — Claudio Fratocchi, Managing Director of Scientia Consulting and CEO of Energieering.

Mr. Fratocchi is available for interviews and speaking engagements to provide further insight into the data and Energieering's projections.

Sources: Clusit 2026 Report; IBM/Ponemon Cost of a Data Breach Report 2026; HHS/OCR healthcare incident data; Cybersecurity Ventures; ABC News, Al Jazeera, CNN (September 24, 2026).

About Claudio Fratocchi

Claudio Fratocchi is Managing Director of Scientia Consulting and CEO of Energieering — companies operating respectively in ICT consultancy and digital transformation, and in the protection of next-generation energy infrastructure. Having previously worked in international settings spanning financial security, anti-money laundering, counter-terrorism financing and market abuse, he now focuses on governance, innovation, cybersecurity, and the integration of business processes, digital technologies and advanced energy systems. He speaks regularly at events dedicated to the energy transition, sustainability and innovation, with a particular focus on organisational resilience and the safeguarding of critical assets.

This contant was orignally distributed by 24-7 Press Release. Blockchain Registration, Verification & Enhancement provided by NewsRamp™. The source URL for this press release is AI Learns to Breach Healthcare Databases After OpenAI Case in Australia. Fratocchi (Energieering): "Healthcare Cyberattacks Are Up 19% Worldwide in a Year".