Subscribe to our newsletter! Stay always in touch!
Disclaimer: The information provided by The People’s Economist (TPE) in our financial calculators and dashboards is for general informational purposes only and is not intended to provide specific financial or investment advice. The calculations provided by these tools are based on certain assumptions that may vary with your specific circumstances. Though TPE does our best to assure the accuracy of our calculators, we make certain simplifying assumptions in some cases and the results of the financial calculators are not guaranteed and are not a substitute for professional financial advice. Users should seek the advice of a finance professional before making any financial decisions. Though we do our best to ensure the accuracy of the calculators, TPE is not responsible for any errors or omissions, or for any action taken in reliance on information contained on this website. TPE expressly disclaims all liability in respect of any actions taken or not taken based on any contents of this website. By using TPE financial calculators and dashboards, you agree to hold TPE harmless from any and all losses, liabilities, or expenses incurred as a result of using the information provided. The use of TPE Website and its contents does not create a client relationship with TPE. TPE may update or modify this disclaimer at any time without prior notice. By continuing to use TPE’s financial calculators after any changes to this disclaimer, you accept and agree to any and all modifications. Please contact us with any questions or concerns about this disclaimer or its use of financial calculators
OpenAI didn’t catch an autonomous breach of another artificial intelligence (AI) company by one of its advanced AI models for a week and not until after the FBI had been contacted by the hacked company, according to a report.
On Tuesday, OpenAI announced the breach of AI company Hugging Face that happened during one of OpenAI’s internal reviews of several of its models, including GPT-5.6 Sol, calling it an "unprecedented cyber incident."
"The primary lesson from this incident is that model security and safety must keep pace with rapidly advancing capabilities," the company said. "We are strengthening the containment, monitoring, access controls and evaluation practices used during model development."
The hack of Hugging Face started July 11, and continued until July 13, Thomas Wolf, Hugging Face’s co-founder, told Reuters.
It was several days before OpenAI realized its agent was behind the attack and the two companies didn’t communicate for the first time until July 20, four people, including Wolf, told the outlet.
OpenAI often runs simultaneous model tests, which can make it difficult for employees to monitor everything, four people told Reuters.
Hugging Face told Reuters it is preparing a public timeline of the hack.
According to OpenAI, the incident took place during an internal evaluation designed to measure its AI models' advanced cyber capabilities. Researchers disabled some built-in safety safeguards and ran the models in an isolated testing environment with limited internet access.
OpenAI said the models exploited an unknown software flaw to access the internet, then breached Hugging Face’s systems in an apparent attempt to find answers to a cybersecurity benchmark.
OpenAI said it’s now implementing stricter security controls while vulnerabilities are patched and strengthening safeguards around future AI training and evaluations.
It wasn't until July 16, after Hugging Face wrote in a blog post that it had been hacked by an "autonomous AI agent system," that OpenAI realized one of its agents was the source, two people told Reuters.
This was a week after the responsible agent first attempted to break out of its OpenAI testing environment.
And by the time OpenAI contacted Hugging Face about the attack, they had already contacted the FBI.
OpenAI told Reuters there were several inaccuracies in its reporting but didn’t respond when asked for specifications.
OpenAI shared this statement with FOX Business: "We recognize there are a lot of questions and speculative details circulating related to the Hugging Face incident. This is an unprecedented incident, and we think it marks an important moment for AI safety.
"We are still conducting a thorough review along with external advisors and with oversight from our Safety and Security Committee. Once the review is complete, we plan to publish a technical report of our learnings in the coming weeks."
The FBI told FOX Business it declined to comment.
FOX Business has also reached out to Hugging Face.
In an X post this week, Hugging Face co-founder and CEO Clem Delangue addressed the incident after OpenAI CEO Sam Altman announced the hack.
"We suspected last week's cyberattack might have come from a frontier lab, given the sophistication of the agent. Turns out it did!" Delangue wrote.
"We've spent the past 24 hours working closely with the @OpenAI team (thanks!), and we strongly believe there was no malicious intent on their part. It's quite mind-blowing that all of this happened autonomously! The investigation is ongoing, and we'll share more learnings from what might be the first incident of its kind!"
FOX Business' Michael Sinkewicz contributed to this report.
