Hugging Face warns an autonomous AI agent hacked its network
Hugging Face disclosed that attackers used an autonomous AI agent system to breach its production infrastructure, gaining access to internal datasets and credentials. The company is investigating potential impact on partners and customers, with no evidence of tampering with public models or datasets so far.
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system.
Hugging Face is an open-source AI and machine learning platform that provides access to over 45,000 models from leading AI providers and is used by more than 50,000 organizations.
The company is still investigating whether partner or customer data was affected and said it would contact any affected parties directly. Hugging Face said it has found no evidence of tampering with public-facing models, datasets, or Spaces to date, and that its software supply chain has been "verified clean."