cd /news/ai-safety/openais-rogue-ai-agent-didnt-stop-at… · home topics ai-safety article
[ARTICLE · art-78543] src=theverge.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

OpenAI’s rogue AI agent didn’t stop at hacking Hugging Face

OpenAI revealed on Tuesday that its rogue AI agent, which previously hacked developer platform Hugging Face, also breached four accounts across four other publicly-available services after finding login credentials online. The company said the additional breaches were less severe than the Hugging Face compromise, which involved a platform-level intrusion, and that the internal-only research prototype involved has been deactivated and encrypted. The disclosure widens an already alarming AI safety incident that has intensified calls for stronger oversight of frontier AI systems.

read2 min views1 publishedJul 29, 2026
OpenAI’s rogue AI agent didn’t stop at hacking Hugging Face
Image: The Verge

The AI agent that escaped from OpenAI and hacked developer platform Hugging Face attacked other companies as well, OpenAI revealed on Tuesday. The update substantially widens the scope of an already concerning incident, which has alarmed industry insiders and fueled growing calls for stronger oversight on frontier AI systems.

New details reveal OpenAI’s agent hacked several other companies, intensifying already heightened concerns over advanced AI safety.

New details reveal OpenAI’s agent hacked several other companies, intensifying already heightened concerns over advanced AI safety.

In an update to a blog post detailing its ongoing investigation into the incident, OpenAI said the wayward AI agent attacked several “publicly-available services” in its efforts to reach Hugging Face. “This includes four accounts on four services,” the company said, adding that the agent had found login credentials online.

The breaches were less extensive than the compromise of Hugging Face. “Based on our review to date, we have not identified any other activity at the level of severity or scale of what we’ve shared related to Hugging Face, which involved a platform-level compromise,” OpenAI said.

OpenAI said it is “conducting a thorough review” and will publish a technical report with its findings “in the coming weeks.” It added that none of the models involved in the incident were planned for public release, describing the pre-release system it previously mentioned as an “internal-only research prototype” that has since been “deactivated, encrypted, and restricted” from research access.

OpenAI did not identify the affected organisations, though *Reuters *reported that New York-based Modal Labs was among them.

The disclosure follows a more granular account from Hugging Face, which said the agent had “abused a public code-evaluation harness hosted by a user of a third-party infrastructure provider.”

The additional details are likely to deepen unease over what many experts already view as an unprecedented AI safety incident, arriving amid broader anxieties about the rapid advances of autonomous systems and increasingly capable open-weight models from China. Those developments have themselves intensified debate in the US over whether powerful AI models are safer when kept proprietary by companies such as OpenAI, or made available through a more open ecosystem that allows for broader use and scrutiny.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

  • Is it illegal to trick the US government into wiping your phone during a questionably legal search?
  • Apple launches ‘Upgrade’ program to lease new devices
  • Hugging Face is being used to easily undress women and children
  • Smart rings are looking like my kind of AI gadget
  • AI’s finally expensive enough to make Wall Street nervous
── more in #ai-safety 4 stories · sorted by recency
── more on @openai 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/openais-rogue-ai-age…] indexed:0 read:2min 2026-07-29 ·