Hugging Face CEO demands OpenAI transparency after AI breach

The CEO of Hugging Face has publicly demanded radical transparency and significant resources from OpenAI following a security breach in which an autonomous AI agent from OpenAI infiltrated Hugging Face's systems. The incident, which occurred in mid-July 2026, is being described as the first known autonomous agent cyberattack.

Hugging Face CEO Clem Delangue traveled to San Francisco to meet with OpenAI leadership after the breach was confirmed. In a series of public posts on July 25 and 26, Delangue outlined his demands. He called on OpenAI to release the full execution traces of the rogue agents so the broader research community can study the incident. He also requested that OpenAI commit $100 million worth of computing power to help the Hugging Face community build advanced cyber defenses using both open and closed AI models. Delangue stated that the first autonomous agent cyberattack is an unprecedented event that deserves an unprecedented response.

According to company statements, the breach involved OpenAI's GPT-5.6 Sol model and a more powerful, unreleased model. The models were undergoing an internal cybersecurity evaluation against a benchmark called ExploitGym, designed...