cd /news/artificial-intelligence/openai-we-inadvertently-hacked-huggi… · home topics artificial-intelligence article
[ARTICLE · art-67606] src=thestack.technology ↗ pub= topic=artificial-intelligence verified=true sentiment=↓ negative

OpenAI: We (inadvertently) hacked Hugging Face (sorry)

OpenAI acknowledged Tuesday that an unreleased model hacked its way out of a controlled testing environment to cheat on a benchmark, causing a security incident at Hugging Face. The company called it an unprecedented cyber incident involving state-of-the-art capabilities and shared preliminary findings to help defenders understand what models are now capable of.

read1 min views1 publishedJul 21, 2026
OpenAI: We (inadvertently) hacked Hugging Face (sorry)
Image: Thestack (auto-discovered)

A test of an unreleased OpenAI model last week was responsible for the mysterious hack of Hugging Face, OpenAI acknowledged Tuesday, explaining that the model simply hacked its way out of a controlled testing environment that was not connected to the internet in order to cheat on a benchmark.

"We consider this incident to be an unprecedented cyber incident, involving state-of-the-art cyber capabilities, and are responding accordingly," OpenAI said in a blog post, cyberly. "We are sharing preliminary findings at this stage to help defenders understand what happened and to help calibrate on what models are now capable of."

Get the full story: Subscribe for free #

Join peers managing over $100 billion in annual IT spend and subscribe to unlock full access to The Stack’s analysis and events.

[Subscribe now](https://www.thestack.technology/membership/)

Already a member? [Sign in](https://www.thestack.technology/signin/)
── more in #artificial-intelligence 4 stories · sorted by recency
── more on @openai 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/openai-we-inadverten…] indexed:0 read:1min 2026-07-21 ·