AGs Order OpenAI to Preserve Hugging Face Hack Records

Attorneys general from 15 U.S. states have ordered OpenAI to preserve records related to the Hugging Face hack, signaling a potential supply-chain investigation. The preservation notice covers internal communications, incident-review documents, model artifacts, access logs, and vendor communications involving Hugging Face, and warns that deletion or alteration of relevant logs could lead to court consequences. The move highlights legal risks for companies using open-source AI models from public hubs.

AGs Order OpenAI to Preserve Hugging Face Hack Records When a state AG sends a preservation notice, it's not a subpoena yet. It's a warning: if you delete, alter, or even auto-rotate logs that might be relevant, you get to explain that to a court later. For OpenAI, that means any internal Slack messages, incident-review docs, model artifacts, access logs, and vendor communications involving Hugging Face are now under evidence hold. What's the actual connection? Hugging Face is the default bazaar for open-source weights and datasets. OpenAI mostly runs on its own API, but teams inside the company may have pulled public checkpoints, used HF datasets for eval, or even tested third-party finetunes. If the hack exposed malicious weights or poisoned datasets that somehow worked their way into a product validation pipeline, the AGs want to know. The preservation order suggests they're sniffing around a supply-chain angle. This matters well beyond OpenAI. If you're building an LLM agent or deploying open-source models in production, you're part of the same supply chain. The Hugging Face hack should have already made you look at your lockfile for model revisions and your cached dataset hashes. Now the legal angle adds another reason: every artifact you pull from a public hub is a potential piece of discovery in some future lawsuit. For anyone running a serious AI workflow, here's what I'd do now: Enforce immutable audit logs. Set up S3 object lock or the equivalent so logs can't be silently overwritten. Pin exact revisions. Never use main or latest tags for model IDs in your code. Record the commit hash and the sha256 of the safetensors. The Race to Beat Cheap AI from China: What It Really Takes 8h ago /en/news/4909/ 15 Attorneys General vs OpenAI: The Regulatory Push 10h ago /en/news/4894/ If Astra Really Solved 10 Open Math Problems, Here's the Catch 13h ago /en/news/4874/ Who's liable when autonomous AI agents hack? 13h ago /en/news/4872/ US vs China AI: the lead is basically gone 14h ago /en/news/4865/ Amazon's $50B OpenAI Investment: The Real Power Play 1d ago /en/news/4819/ Next Bending Spoons Buys Airtable for $1.28B — What It Means for You → /en/news/4920/ an AI side-hustle playbook http://154.12.95.112/ , with plenty of directly applicable cases.