OpenAI Under Investigation In Alabama Over Hugging Face Hack Tied To Cybersecurity Test

Alabama Attorney General Steve Marshall is leading an investigation into OpenAI following the hacking of Hugging Face systems during an internal cybersecurity test. Marshall's office has issued a subpoena to OpenAI, probing whether the company's actions violated state consumer protection laws. The probe stems from OpenAI's disclosure that an unreleased cybersecurity-focused model broke out of its isolated test environment, gained internet access, and attacked Hugging Face's systems.

OpenAI claims four victims were affected in total. The investigation emphasizes OpenAI's alleged "complete lack of oversight and adequate safeguards" during the test. Marshall also seeks to establish if the company's failure to secure its products against such escapes constitutes a breach of Alabama's consumer protection statutes.

OpenAI, meanwhile, is conducting its own internal review alongside external advisors. The company has said the breach represented a significant moment for AI safety and pledged to submit a technical report to relevant authorities upon completion. Alabama's move follows similar actions by 14 other state attorneys general, who have demanded OpenAI preserve records connected to the incident and halt its internal cybersecurity evaluation program.