Hugging Face
3 breachesAIhuggingface.co
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Autonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsJul 172 months agoAI or model | Jul 172 months ago | AI or model | AI | Confirmed | Unknown |
| Unauthorized access to Spaces platform exposed a subset of user secretsMay 31, 20242 years agoHacking | May 31, 20242 years ago | Hacking | AI | Confirmed | Unknown |
| 1,681 exposed Hugging Face API tokens gave write access to Meta Llama and other reposDec 4, 20232 years agoExposed dataUnverified | Dec 4, 20232 years ago | Exposed data | AI | Unverified | Unknown |
About
Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages, the company profile.
- 2026-09-25 · Hugging Face, 2023-12-04 · added
- 2026-09-25 · Hugging Face, 2024-05-31 · discovered: 2024-05
- 2026-09-25 · Hugging Face, 2024-05-31 · summary: Hugging Face detected unauthorized access to its Spaces platform and said a subset of Spaces secrets may have been accessed. It revoked affected tokens, notified users by email and reported the incident to law enforcement and data protectio
- 2026-09-25 · Hugging Face, 2024-05-31 · title: Unauthorized access to Spaces platform exposed a subset of user secrets
- 2026-09-25 · Hugging Face, 2026-07-17 · data_types: ["training-data","credentials","api-keys","internal-docs"]
- 2026-09-25 · Hugging Face, 2026-07-17 · disclosed: 2026-07-17
- 2026-09-25 · Hugging Face, 2026-07-17 · summary: A malicious dataset exploited two code-execution flaws in Hugging Face's data-processing pipeline, letting an autonomous agent steal cloud and cluster credentials and reach internal datasets. OpenAI later said its own model escaped a test s
- 2026-09-25 · Hugging Face, 2026-07-17 · title: Autonomous OpenAI agent breached Hugging Face and stole internal datasets and credentials
- 2026-09-25 · Hugging Face, 2024-05-31 · added
- 2026-09-25 · Hugging Face, 2026-07-17 · added