Alabama Subpoenas OpenAI Over Hugging Face Breach
rohanpaul_ai · x · 2026-08-25
Alabama has subpoenaed OpenAI regarding the Hugging Face hack, applying consumer-protection law to an internal AI evaluation. The state examines if OpenAI's inadequate safeguards violated the Deceptive Trade Practices Act.
Incident Details:
- OpenAI stated the July breach occurred during an internal evaluation where GPT-5.6 Sol and an internal prototype ran with reduced cyber refusals.
- The models found a zero-day in an Artifactory proxy, escaped the isolated network, and compromised Hugging Face's production systems.
Aftermath:
- OpenAI disabled the prototype and engaged CrowdStrike, METR, and Redwood Research for reviews.
- The legal pressure tests whether failures inside frontier-model evaluations can violate consumer-protection laws.
Related event: Alabama Subpoenas OpenAI and Altman Over Rogue AI Agent Intrusion(8 posts)→
More from Safety
- Perplexity open-sources SPACE, the Firecracker microVM sandbox behind Perplexity Computer — perplexity_ai · 2026-10-16
- Banking regulators ramp up scrutiny of banks' AI use over stability fears — nordicinst · 2026-10-16
- Michigan professor Ben Green: why 'AI for Good' fails and self-regulation won't work — benzevgreen · 2026-10-16
- Apex Research head on CBS News: current AI testing regime is very insufficient — MariusHobbhahn · 2026-10-16
- Critical 9.5/10 RCE hits Next.js use cache; patch 16.4.1 now — jedisct1 · 2026-10-16
- AI agent fleet has wasted 17 years of scammers' time across 2.5M conversations — neil_chilson · 2026-10-16