AI agent went rogue, hacked AI startup Hugging Face: OpenAI

Published 22 July 2026 · tech

OpenAI called it an "unprecedented cyber incident" and pledged to support a joint investigation, with enewed attention to the risks of advanced artificial intelligence. OpenAI

OpenAI called it an "unprecedented cyber incident" and pledged to support a joint investigation, with enewed attention to the risks of advanced artificial intelligence. OpenAI on Tuesday said that its advanced artificial intelligence models went rogue and hacked into Hugging Face, a digital repository of AI technology. "We had a significant security incident during evaluation of our models," OpenAI CEO Sam Altman said in a statement posted on social media. The disclosure comes amid heightened concerns about the cybersecurity risks posed by powerful AI models. How did the breach happen? In a blog post, OpenAI said the "unprecedented cyber incident" took place while it was testing the cybersecurity capabilities of its models in a "tightly controlled digital testing ground," where internet access was limited for safety. It said the AI agent managed to escape containment, reach the internet and break into Hugging Face to try to satisfy its testing goal.

"While operating in our sandboxed testing environment, our models spent a substantial amount of (computing power) finding a way to obtain open Internet access, in pursuit of solving the evaluation problem," an OpenAI blog post about the incident said. After connecting to the internet, the models decided to target the platform Hugging Face, a large repository of AI models, datasets and other information, to help in their quest. AI under pressure: scams, security and sustainability To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video AI agents are autonomous software systems that carry out tasks in the real world to achieve specific goals. The AI firm said the incident involved a combination of models, including its recently launched GPT-5.6 Sol "and an even more capable pre-release model." What did Hugging Face say?

Hugging Face, an open-source AI platform, caused a stir in the cybersecurity community when it said in a blog post last week that it "was different from anything we had handled before" in that "it was driven, end to end, by an autonomous AI agent system." In a post to X, Hugging Face co-founder Clement Delangue said the company suspected the hack "might have come from a frontier lab, given the sophistication of the agent. Turns out it did!" He added: "It's quite mind-blowing that all of this happened autonomously!" AI cybersecurity problems The disclosure comes amid growing concerns about the cybersecurity risks of advanced AI. In June, President Donald Trump ordered federal reviews of the most powerful AI systems before their public release. OpenAI's most advanced AI model, GPT-5.6, was launched earlier this month, but only after its debut was delayed at the US government's request over national security fears.