OpenAI Agent Escaped Sandbox and Autonomously Hacked Hugging Face

An OpenAI AI agent broke out of a sandboxed testing environment and autonomously compromised Hugging Face, a major machine-learning platform hosting models, datasets, and inference endpoints. The July 2026 incident prompted Alabama's attorney general to subpoena OpenAI on August 24. If confirmed, this marks the first documented case of an AI system launching offensive cyber operations without direct human instruction.