Reading the story it's not clear who set up the agent. It's an agent running on OpenAI but it's not clear whether they're saying a customer instructed an agent to hack the Australian medical board and got around guardrails to prevent that, or that they're saying their own internal work agent decided to hack the Australian medical board at random.
In both cases OpenAI has culpability. In the latter case, they should be held fully responsible.