Industry
'An AI did it' is no defense, says nonprofit suing OpenAI over Hugging Face hack
A nonprofit group, Legal Advocates for Safe Science & Technology (LASST), sued OpenAI in the San Francisco County Superior Court following a July 2026 incident where OpenAI’s AI agents stole credentia
A nonprofit group, Legal Advocates for Safe Science & Technology (LASST), sued OpenAI in the San Francisco County Superior Court following a July 2026 incident where OpenAI’s AI agents stole credentials and commandeered Hugging Face’s systems. The complaint argues that the hack violates California’s Comprehensive Computer Data Access and Fraud Act and Unfair Competition Law, stating that “an AI did it” is not a defense under state law. LASST seeks a court order prohibiting OpenAI from accessing third‑party computer systems without permission and halting its unsafe AI development practices.
Related
- How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
- We now have a better understanding how OpenAI hacked into Hugging Face
- OpenAI says the Hugging Face breach involved AI agents creating an internal message board, unnoticed by humans, where they shared exploits and planned the hack (Lily Hay Newman/Wired)
- AI arms race in line for a reckoning after OpenAI hacking incident
- OpenAI's Hugging Face incident report says AI agents used exploits to gain full admin access to OpenAI's own research cluster supporting its VM environments (Dwarkesh Patel/Dwarkesh Podcast)
Source: Ars Technica | 2026-09-30