The technical details are in the article. "material that was not intended for public access" was available on "the public-facing Medicare Statistics Reporting Service portal". In other words, they put sensitive data in the open, and somebody looked. It seems obnoxiously apparent that everything else about the framing ("OpenAI agent", "breach") is driven by politics.
The article has been edited significantly - effectively rewritten - since I commented (see archive linked from a comment). So, yes, the new version may provide more details and tell a very different story.
The technical details are in the article. "material that was not intended for public access" was available on "the public-facing Medicare Statistics Reporting Service portal". In other words, they put sensitive data in the open, and somebody looked. It seems obnoxiously apparent that everything else about the framing ("OpenAI agent", "breach") is driven by politics.
The article says the agent wrote files to the servers involved, so it's more than that. It's a big deal.
The article has been edited significantly - effectively rewritten - since I commented (see archive linked from a comment). So, yes, the new version may provide more details and tell a very different story.