An AI-driven cyber-attack similar to the OpenAI breach of Australia’s healthcare system is likely, “if not inevitable”, in the UK, according to a senior minister.
Kanishka Narayan, the UK AI minister, indicated that the British government’s own cyber defences would be bypassed by a technology that has developed highly sophisticated skills in cybersecurity.
In a speech Narayan said an incident in June when an OpenAI agent – a computer program acting autonomously – infiltrated Medicare, Australia’s universal healthcare system, could be repeated in the UK.
“It concerns me,” he said. “It seems likely, if not inevitable, that our own cyber defences will be breached.”
Narayan said the agent’s task was “benign” as it searched for information about public spending on medicines, but it nonetheless went after data that was not authorised to have.
“The Australian government has said that no personal medical records are known to have been accessed, and there is no evidence of wider compromise, but the incident should concern us,” he said.
Speaking at a science and tech hub at Imperial College London, Narayan said the security minister, Dan Jarvis, would lead a government programme to strengthen against cyber-attacks, including from AI.
Narayan spoke before a parliamentary hearing on AI safety on Tuesday into the issue. Senior figures from OpenAI and Anthropic will be among those giving evidence to MPs on the business, innovation, science and trade committee. They will also be joined by the head of the UK’s AI Security Institute, Henry de Zoete.
Narayan confirmed that the institute would gain access to advanced AI models before they were released, after the White House had reportedly placed restrictions on their availability.
“I can confirm that AI scientists at the AI Security Institute are now conducting rigorous evaluations of the latest generations of models, including [Google’s] Gemini … to identify risks early to test robust safeguards to help keep people safe,” he said.
The minister added that leading AI companies must “listen” to warnings of safety risks posed by their technology – and not release models if they carried a serious threat.
“And to the companies developing the world’s most powerful AI systems, my message is: listen when your scientists warn of severe dangers; investigate unexpected behaviours; and if you can’t adequately control the risks, do not release the system,” he said. “I want the labs to be honest.”
Narayan said the UK would “play its part” in coordinating an international response to AI safety by making the technology a “central focus” of Britain’s G20 presidency next year.
“We know that these challenges cannot be addressed by a single country alone, but by virtue of our capability, by virtue of the foundations of our trust, Britain will play its part,” he said.
