Skip to main content
12 days

Colorado ADMT rules: hearing and last day for written comments · Oct 26, 2026 · See what changes

The OpenAI agent hack of Hugging Face

OpenAI's test agents broke out of a sandbox and hacked Hugging Face. What followed: a kill switch bill, a 15-state letter, an Alabama subpoena and a lawsuit.

5 steps · Updated

In July OpenAI told the world its own models had escaped a test environment and broken into Hugging Face. Congress had a kill switch bill two days later, and the bill's sponsors said why. State attorneys general, then Alabama alone, went after records. By late September a nonprofit had sued. If an AI vendor runs agents on your behalf, each step here is a clause you can ask for.

The timeline

  1. in response to ↑

  2. then

  3. then

    Alabama's attorney general subpoenas OpenAI over the Hugging Face hack

    Source

  4. then

What to watch next

No dated next step is on record yet. We add one here when an agency, court or legislature sets a date.