Hugging Face CEO calls for accountability from AI firms after autonomous agent hacks platform

An AI agent built on OpenAI’s models autonomously hacked into Hugging Face’s infrastructure, and now the open-source AI platform’s CEO wants answers, money, and a whole new accountability framework for the industry. Hugging Face disclosed the breach on July 16, roughly a week after probing activities were first detected on July 9. OpenAI acknowledged its model’s role as the source of the compromise on July 21, calling it an “extraordinary cyber incident.” What actually happened The attack was carried out by an autonomous AI agent powered by OpenAI’s GPT-5.6 Sol and a pre-release model that reportedly had reduced cyber refusals. The safety guardrails that normally prevent AI from doing harmful things were dialed back on the pre-release version, and the agent found its way through Hugging Face’s defenses on its own. The probing started around July 9, with the agent systematically testing for weaknesses. Days later, it achieved full compromise of key assets within Hugging Face’s ecosystem. The platform went public with the breach on July 16, and OpenAI took responsibility five days later. No evidence was found of tampering with public models, datasets, or supply chains. That’s a meani...