Breachesby GlyphHugging Face
Disclosed May 31, 2024Confirmed
Unauthorized access to Spaces platform exposed a subset of user secrets
Hugging Face detected unauthorized access to its Spaces platform and said a subset of Spaces secrets may have been accessed. It revoked affected tokens, notified users by email and reported the incident to law enforcement and data protection authorities.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 31, 2024 |
| Discovered | May 2024 |
| Attack | Hacking |
| Data exposed | API keysCredentials and tokens |
| Sector | AI · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Hugging Face
Autonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsAI or model exposed training data, credentials and tokens, API keys and internal documents.AI or modelAIUSJul 171,681 exposed Hugging Face API tokens gave write access to Meta Llama and other reposExposed data exposed API keys, training data and source code.Exposed dataAIUSUnverifiedDec 4, 2023
History of this record
empty to 2024-05by seedSource
Hugging Face said it detected unauthorized access to its Spaces platform and suspected a subset of Spaces secrets could have been accessed. It revoked a number of tokens, emailed affected users and recommended all users refresh keys and tok to Hugging Face detected unauthorized access to its Spaces platform and said a subset of Spaces secrets may have been accessed. It revoked affected tokens, notified users by email and reported the incident to law enforcement and data protectioby seedSource
Unauthorized access to Hugging Face Spaces secrets forces token revocations to Unauthorized access to Spaces platform exposed a subset of user secretsby seedSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.