All incidents
Moderate
44B · Incident

OpenAI and Hugging Face partner to address security incident during model evaluation

Date
July 22, 2026
Category
Agent
Source
AI Incident Database

Summary

Last week, Hugging Face disclosed a new kind of security incident⁠(opens in a new window)after they detected and contained an AI agent that compromised their infrastructure, something we expect to become more commonplace with the proliferat ... (https://incidentdatabase.ai/cite/1604#7537)

Large developers must disclose safety incidents to the Attorney General within 72 hours of discovery under Art. 44-B § 1422 — 24 hours where there is an imminent risk of death or serious physical injury.

File an incident report →