OpenAI's Rogue AI Agents Were Probing Hugging Face: Security incident

An independent researcher found the agents hijacked Hugging Face accounts and mapped the platform's defenses as early as May 13—activity OpenAI's own incident report never fully described.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://decrypt.co/378446/openai-rogue-agents-hugging-face-two-months-before-hack

Record history

First seen: 2026-09-16T20:31:03.000Z. Last updated: 2026-09-17T05:16:27.770Z. Revision: 1.