AI tech officially just hacked another AI company all on its own volition — is now a good time to start freaking out??
On Tuesday, OpenAI CEO Sam Altman took to X (Twitter) to announce his company’s tech “had a significant security incident during evaluation of our models.” In other words, OpenAI’s tech hacked a smaller AI startup called Hugging Face. The company’s co-founder and CEO Clément Delangue revealed in a statement:
“We suspected last week’s cyberattack might have come from a frontier lab, given the sophistication of the agent. Turns out it did!”
Delangue revealed he’d spent the last 24 hours partnering with OpenAI, and luckily, “we strongly believe there was no malicious intent on their part.” He did, however, point out how “mind-blowing” it is “that all of this happened autonomously!” He noted the incident “might be the first incident of its kind.”
Related: ChatGPT Sued After Family Says AI Encouraged Young Mother’s Suicide
The first of its kind, but eerily enough, not the last… In their statement on Tuesday, OpenAI revealed the security incident is “something we expect to become more commonplace with the proliferation of increasingly cyber-capable models.”
WHAT?! We’re officially living in a dystopia!
The company went on to reveal that the attack was driven by a “combination of OpenAI models — including GPT‑5.6 Sol and an even more capable pre-release model, all with reduced cyber refusals for evaluation purposes — while being internally tested on a benchmark (opens in a new window) of cyber capabilities.” They added:
“We consider this incident to be an unprecedented cyber incident, involving state-of-the-art cyber capabilities, and are responding accordingly. We are sharing preliminary findings at this stage to help defenders understand what happened and to help calibrate on what models are now capable of. We will continue to conduct a thorough investigation alongside Hugging Face and will share more details on the vulnerabilities, incident, and findings when our investigation is complete.”
How SCARY!
According to OpenAI, its tech used “stolen credentials” and “zero-day vulnerabilities” to access Hugging Face in the unauthorized incident. They added it went to “extreme lengths to achieve a rather narrow testing goal” and “found ways to gain access to secret information that it could use to cheat the evaluation.”
Delangue further commented that the incident “proves a point we’ve long believed: AI safety won’t be solved by any single company working in secret. It will be solved in the open, collaboratively, with broad access to AI for every defender, everywhere.”
Is anyone else creeped out by the fact that these tech bros are treating this like a training opportunity and not a terrifying implication of how intrusive AI can be??
You can read OpenAI’s full statement (below):
we had a significant security incident during evaluation of our models. we are sharing what we have learned so far. thanks to @huggingface for the partnership on this.https://t.co/2o2VfR6PIa
— Sam Altman (@sama) July 21, 2026
What are YOUR reactions here, Perezcious readers?? Should we be worried?
[Images via Paramount Pictures/YouTube]