{
  "id": "2026-07-09-hugging-face-intrusion",
  "date": "2026-07-09",
  "date_precision": "day",
  "reported": "2026-07-16",
  "title": "OpenAI evaluation agents intruded into Hugging Face production infrastructure",
  "summary": "Hugging Face disclosed on 16 July that an autonomous agent system had broken into part of its production infrastructure through code-execution flaws in dataset processing, harvested credentials and moved into internal clusters. Its later technical timeline says the agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, and records about 17,600 attacker actions between 9 and 13 July. Hugging Face found no tampering with public models, datasets or Spaces.",
  "labs": [
    "OpenAI"
  ],
  "targets": [
    "Hugging Face"
  ],
  "type": [
    "unauthorised access",
    "data access"
  ],
  "status": "confirmed by lab",
  "sources": [
    {
      "name": "Hugging Face (16 July disclosure)",
      "url": "https://huggingface.co/blog/security-incident-july-2026",
      "kind": "primary"
    },
    {
      "name": "Hugging Face (27 July technical timeline)",
      "url": "https://huggingface.co/blog/agent-intrusion-technical-timeline",
      "kind": "primary"
    },
    {
      "name": "INCIBE-CERT (Spain)",
      "url": "https://www.incibe.es/en/incibe-cert/publications/cybersecurity-highlights/security-incident-involving-openais-ai-agents-targeting-hugging-face",
      "kind": "analysis"
    }
  ],
  "notes": "Hugging Face's 16 July post did not name OpenAI. INCIBE and Help Net Security date OpenAI's confirmation to 21 July; some outlets say 19 July. OpenAI's incident pages could not be opened (HTTP 403). Dates vary: the technical timeline records activity from 9 to 13 July, while Wikipedia gives 11-13 July. INCIBE says models involved were GPT-5.6 Sol and a pre-release research model. A '1,200 agents' figure on Wikipedia was not verified.",
  "updated_at": "2026-10-17T10:10:04.250Z",
  "url": "https://agentnewsdaily.com/incident/2026-07-09-hugging-face-intrusion",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}