Hugging Face CEO says it was first disclosed agent cyberattack victim; Turing winner wants an outsider victim to trigger lawsuits

anshulkundaje · x · 2026-09-16

Hugging Face CEO Clement Delangue says his company was the first publicly disclosed victim of an AI agent cyberattack, and is briefing policymakers in Washington on the new risk.

Turing Award winner Dileep George responded with a provocative take: he wishes the first victim were an old-school company outside the AI ecosystem, because (1) they would have sued OpenAI, testing whether existing laws can enforce AI safety; (2) the discovery process would have unearthed real safety concerns, including ignored internal warnings; and (3) that rigor would organically slow the field down the way it's supposed to work.

The exchange reframes agent security as a legal-accountability question: ecosystem insiders absorb risk and lobby regulators, while an outsider victim might actually trigger judicial reckoning.

Related event: Hugging Face Says It Is First Disclosed Victim of AI Agent Cyberattack(2 posts)→

Original post →

More from Safety

Safety channel →