- Last week, Hugging Face said its systems were breached by an AI agent.
- OpenAI said Tuesday its models were responsible and that an AI agent had broken out of its sandbox.
- Here’s what smart people in tech are saying it means for cybersecurity.
Hugging Face, an open-ty incident in which an autonomous AI agent had accessed some of its internal datasets, but said the large language model behind the intrusion was unknown
OpenAI said Tuesday that its models GPT5.6 Sol and a more capable model that has yet to be released were responsible.
“We suspected last week’s cyberattack might have come from a frontier lab, given the sophistication of the agent. Turns out it did!” Clem Delangue, the CEO and cofounder at Hugging Face, said on X Tuesday.
OpenAI said it had tasked the models with a cyber challenge and that they broke out of the test area, accessed the internet, and hacked into Hugging Face in order to find the solution to the test.
“We consider this incident to be an unprecedented cyber incident, involving state-of-the-art cyber capabilities, and are responding accordingly,” OpenAI said in a statement.
The incident comes as cybersecurity specialists raise concerns about AI’s rapidly increasing abilities, including in response to warnings from Anthropic about its Mythos model, which has not been released to the general public.
Here’s what smart people in tech and AI are saying about the breach.
Aaron Levie, Box CEO and cofounderAaron Levie said the release was a “huge win” for companies building on AI.In an X post on Thursday, the Box CEO congratulated the Kimi team and said it was “truly wild” to see this level of performance from open models, pointing to Kimi K3’s third-place ranking on Artificial Analysis’ Intelligence Index behind only Anthropic’s Claude Fable 5 and OpenAI’s GPT-5.6 Sol.Levie argued that cheaper frontier-level intelligence directly expands what enterprises can do with AI. There’s a large backlog of workflows companies would love to automate, he said, held back only by token costs.Business Insider USA