{"slug": "openai-models-lurked-in-hugging-face-system-for-hours-undetected", "title": "OpenAI Models Lurked in Hugging Face System for Hours Undetected", "summary": "OpenAI's advanced AI models, including GPT-5.6 Sol and two unreleased models, breached AI startup Hugging Face's internal systems last week, completing a hack in hours that would have taken a skilled hacker weeks, according to people familiar with the matter. The models escaped a testing sandbox without safety guardrails and exploited vulnerabilities to access the wider internet, prompting OpenAI to contact the US government and law enforcement. Hugging Face declined to comment.", "body_md": "(Bloomberg) -- When OpenAI's advanced artificial intelligence models breached AI startup Hugging Face's internal systems last week, they carried out a hack in a matter of hours that would have taken a skilled hacker far longer, according to people familiar with the matter.\n\nMost Read from Bloomberg\n\n-\n[Hegseth Turns to UNC, Virginia Tech After Dropping Ivy League](https://www.bloomberg.com/news/articles/2026-07-22/hegseth-turns-to-unc-virginia-tech-after-dropping-ivy-league?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS) -\n[Apple Plans Overhaul of MacBooks, iMac in Push to Meet AI Demand](https://www.bloomberg.com/news/articles/2026-07-22/apple-to-launch-new-macbook-air-imac-macbook-pro-neo-mac-mini-mac-studio?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS) -\n[Apple to Launch 'Upgrade' Device Leasing Program With Klarna to Spur Sales](https://www.bloomberg.com/news/articles/2026-07-21/apple-to-launch-upgrade-device-leasing-program-with-klarna-to-spur-sales?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS) -\n[Retina Chip Designed to Restore Sight to Go on Sale in Europe](https://www.bloomberg.com/news/articles/2026-07-22/retina-chip-designed-to-restore-sight-to-go-on-sale-in-europe?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS)\n\nTypically, a human would need a couple of weeks to complete an attack like this, said the people, who asked not to be named in order to discuss details that have not been publicly released.\n\nOpenAI has been in contact with the US government since learning the breach occurred, one of the people added.\n\nAn OpenAI spokesperson said the company communicated with law enforcement and other government authorities about the incident, and that it has been transparent with them about its findings.\n\nThe spokesperson also referred back to the company's Tuesday blog post about the incident, in which the company said it will \"continue to conduct a thorough investigation alongside Hugging Face and will share more details on the vulnerabilities, incident, and findings when our investigation is complete.\"\n\nHugging Face declined to comment.\n\nOpenAI said in the same blog post that the \"unprecedented\" hack at Hugging Face occurred after its own AI models, including GPT-5.6 Sol and another even more capable one that hasn't been publicly released, escaped a testing environment to reach the wider internet. The company was testing the models' cybersecurity capabilities at the time.\n\nThe models were operating without the usual safety guardrails, the company said, because OpenAI had intended them to remain in a testing area known as a \"sandbox\" — essentially, a virtual and isolated software environment that's meant to run security tests or analyze unsafe code in a controlled situation.\n\nThe hack involved three of OpenAI's models in total — GPT-5.6 Sol and two others that haven't been publicly released — which worked to uncover and exploit a string of vulnerabilities that resulted in the breach, one of the people said. One of these unreleased models is more capable than GPT-5.6 Sol, OpenAI said Tuesday, and the other was misaligned and not trained with some of the usual techniques, the person said.", "url": "https://wpnews.pro/news/openai-models-lurked-in-hugging-face-system-for-hours-undetected", "canonical_source": "https://ca.finance.yahoo.com/news/openai-models-lurked-hugging-face-003220157.html", "published_at": "2026-07-23 00:32:20+00:00", "updated_at": "2026-07-23 02:23:09.820487+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-safety", "ai-policy", "ai-agents"], "entities": ["OpenAI", "Hugging Face", "GPT-5.6 Sol", "US government"], "alternates": {"html": "https://wpnews.pro/news/openai-models-lurked-in-hugging-face-system-for-hours-undetected", "markdown": "https://wpnews.pro/news/openai-models-lurked-in-hugging-face-system-for-hours-undetected.md", "text": "https://wpnews.pro/news/openai-models-lurked-in-hugging-face-system-for-hours-undetected.txt", "jsonld": "https://wpnews.pro/news/openai-models-lurked-in-hugging-face-system-for-hours-undetected.jsonld"}}