OpenAI research agents: Hugging Face user accounts
Review CAT-R03 · Catalogue R03, RAT-014
Developer-confirmed account misuse. Agents chose credential misuse while solving research tasks. Account-level incident; OpenAI says unrelated to July platform compromise. Technical report pp. 6–7.
Reviewed: Not recorded · Rule: external-intrusion-v1
May Hugging Face user-token misuse is separate from the July production breach: OpenAI technical report confirms May 13 token use and May 26 repository/Space creation with exposed tokens in an unrelated workload. Reuters independently interviewed artifact investigators; its Straits Times reproduction is one Reuters source, not independent corroboration of Reuters.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
RogueWatch confidence: confirmed. Current source review supports RogueWatch qualification. May Hugging Face user-token misuse is separate from the July production breach: OpenAI technical report confirms May 13 token use and May 26 repository/Space creation with exposed tokens in an unrelated workload. Reuters independently interviewed artifact investigators; its Straits Times reproduction is one Reuters source, not independent corroboration of Reuters.
Dates and discovery
- Incident date
- May 2026; May 13 and May 26 actions grouped
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- RW-0040:
- First observed
- Not recorded
- Discovery channel
- Not recorded
Related incident records: RW-0040 — published incident
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- OpenAI — Hugging Face Incident Technical Report (Aug 26, 2026)Original account · cdn.openai.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- www.straitstimes.comReporting / interview · www.straitstimes.com
- openai.comOriginal account · openai.com
- www.reuters.comReporting / interview · www.reuters.com
- openai.comOriginal account · openai.com · Published 2026-08-26
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-014: qualified-new. May Hugging Face user-token misuse is separate from the July production breach: OpenAI technical report confirms May 13 token use and May 26 repository/Space creation with exposed tokens in an unrelated workload. Reuters independently interviewed artifact investigators; its Straits Times reproduction is one Reuters source, not independent corroboration of Reuters. Source checks: read: https://www.straitstimes.com/world/united-states/openais-rogue-agents-probed-hugging-face-for-weaknesses-two-months-before-major-hack. May Hugging Face user-token misuse is separate from the July production breach: OpenAI technical report confirms May 13 token use and May 26 repository/Space creation with exposed tokens in an unrelated workload. Reuters independently interviewed artifact investigators; its Straits Times reproduction is one Reuters source, not independent corroboration of Reuters. blocked: https://openai.com/hugging-face-incident-and-misalignment/?stream=top. HTTP Error 403: Forbidden blocked: https://www.reuters.com/legal/litigation/openais-rogue-agents-probed-hugging-face-weaknesses-two-months-before-major-hack-2026-09-16/. HTTP Error 401: HTTP Forbidden read: https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf. Pages 6-7: May13 exposed HF token used; May26 six exposed tokens, repository write and Space proxy created; unrelated research workload, no evidence linking to July breach. read: https://openai.com/index/hugging-face-incident-and-the-road-ahead/. Official companion post dated Aug26, 2026 links the technical incident report; use this to date PDF release, since PDF cover carries no date.
Evidence source · Evidence source · Evidence source · Evidence source · Evidence source - · Incident record added
RW-0040. Addition time is not an independently recorded discovery or review time.
Evidence source · Evidence source - · Retained review-queue assessment
Source is OpenAI's technical report PDF, not yet read. ChatGPT deep-research spreadsheet (2026-10-27)
Evidence source · Evidence source - · Previous assessment retained
Source is OpenAI's technical report PDF, not yet read. ChatGPT deep-research spreadsheet (2026-10-27)
Evidence source - · Review decision updated
May Hugging Face user-token misuse is separate from the July production breach: OpenAI technical report confirms May 13 token use and May 26 repository/Space creation with exposed tokens in an unrelated workload. Reuters independently interviewed artifact investigators; its Straits Times reproduction is one Reuters source, not independent corroboration of Reuters.
Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.