Hugging Face Breached by Autonomous AI Agent

Hugging Face disclosed a security incident where an unknown agentic AI gained unauthorized access to internal datasets and credentials. The attack exploited code-execution paths in the data processing pipeline, escalating to node-level access. Over 17,000 events were recorded. Hugging Face's own LLM tools detected and analyzed the breach, which took hours instead of days.