Hugging Face admits AI‑driven breach that stole internal datasets and credentials
Hugging Face disclosed that an autonomous AI agent exploited a dataset‑processing bug to gain node‑level access, siphoning internal datasets and service credentials. The company patched the vulnerability, revoked tokens, and urges all users to rotate their access keys. This marks a rare public example of an AI‑driven supply‑chain attack on a major ML platform.