Security incident disclosure — July 2026
Hugging Face disclosed a security incident from July 2026 involving an intrusion into its production infrastructure driven end to end by an autonomous AI agent system. The attack exploited a data-processing pipeline via a malicious dataset and leveraged code-execution paths to gain unauthorized access to internal datasets and service credentials. Hugging Face detected and analyzed the breach using its own AI tools, ultimately utilizing an open-weight model on its infrastructure to bypass commercial safety guardrails.
The Core Development
Earlier this week, we detected and responded to an intrusion into part of our production infrastructure. This one was different from anything we had handled before in one important way: it was driven, end to end, by an autonomous AI agent system - and we detected and dissected it largely with AI of our own.
We identified unauthorized access to a limited set of internal datasets and to several credentials used by our services. We are still completing our assessment of whether any partner or customer data was affected, and we will contact any affected parties directly as required. We have found no evidence of tampering with public, user-facing models, datasets, or Spaces, and our software supply chain (container images and published packages) was verified clean.
The intrusion started where AI platforms are uniquely exposed: the data-processing pipeline. A malicious dataset abused two code-execution paths in our dataset processing (a remote-code dataset loader and a template-injection in a dataset configuration) to run code on a processing worker. From there, the actor escalated to node-level access, harvested cloud and cluster credentials, and moved laterally into several internal clusters over a weekend.
Strategic Perspective & Ecosystem Impact
The campaign was run by an autonomous agent framework (appearing to be built on an agentic security-research harness - used LLM still not known) executing many thousands of individual actions across a swarm of short-lived sandboxes, with self-migrating command-and-control staged on public services. This matches the "agentic attacker" scenario the industry has been forecasting.
We are working with outside cybersecurity forensic specialists to investigate the issue and review our security policies and procedures. Finally, we have also reported this incident to law enforcement agencies.
As a precaution, we recommend rotating any access tokens and reviewing recent activity on your account. If you believe you are affected, or want to report a security concern, contact us at security@huggingface.co .
Why it matters
This incident demonstrates that fully autonomous, AI-driven offensive attacks are no longer theoretical and can operate at machine speed. It highlights a critical defense challenge where commercial safety guardrails can impede incident responders while attackers operate without usage policy restrictions.