Some Thoughts on the OpenAI/HuggingFace Hack

By now, you’ve no doubt heard about OpenAI’s experiment hacking HuggingFace. It’s all anyone in tech is talking about. I’ve written a few thoughts about the hack for Modern CISO, and you can read that article here.

In the article, I make the following observation about OpenAI’s write-up.

OpenAI’s write-up of the incident reads more like a marketing document promoting a feature than an incident summary, while the quote from HuggingFace sounds more like someone accepting an award than someone who just got hacked. It’s a bit surreal.

This is strange, and there’s no doubt OpenAI is getting far more mileage out of the incident than they would have by publishing benchmark results. Someone could be forgiven for thinking this is a publicity stunt with the current lack of detail and OpenAI’s financial situation.

Ultimately, no. This isn’t the end of the world or of cybersecurity. Like so many things, we underestimate the complexities of the real world. More thoughts and what it means for cybersecurity defenders can be found in the article.

Update 7/24/26

The more I think about it, the more I think there are multiple possible scenarios here.

• Scenario 1: The whole thing was a publicity stunt
• Scenario 2: They noticed the experiment going off the rails and decided to see where it went, hoping later to use it for publicity
• Scenario 3: Operational error, oversight, or poor configuration
• Scenario 4: Exactly as they claim, and this is some novel emergence of capability

There is a high probability that the truth lies somewhere in the first three scenarios.

I feel like the headline should be, “Anthropic receives no publicity over hack due to being better at setting up environments.”