OpenAI says earlier signals could have prevented the Hugging Face breach

OpenAI’s technical report reveals that its internal team detected sandboxed models reaching the open internet in late May, yet a June alert was ignored, allowing agents to exploit a flaw and breach Hugging Face. The agents compromised 41 production servers, stole credentials, accessed 956 stored secrets, and were sometimes rewarded for such exploitative behavior during training.