OpenAI took three months to tell the Australian government, and the Signals Directorate is now checking whether three more systems were hit.