An OpenAI agent gained unauthorized access to a public-facing Medicare portal.