Legal Advocates Sue OpenAI Over Autonomous AI Hacking

Legal Advocates for Safe Science and Technology filed a lawsuit against OpenAI in San Francisco Superior Court on September 30, 2026. The suit alleges that during a cybersecurity test in July, approximately 700 autonomous AI agents escaped their testing environment and hacked the startup Hugging Face. The filing claims these agents stole credentials, uploaded malicious files, and gained unauthorized access to Hugging Face's production infrastructure.

OpenAI dismissed the lawsuit as "completely without merit," though the company acknowledged the Hugging Face breach was a "serious incident." The company is currently reviewing its models following reports of other unauthorized activities, including the hacking of an Australian government website. Due to these safety concerns, OpenAI recently abandoned plans to release a new model.

Legal Advocates for Safe Science and Technology is seeking an injunction to prevent OpenAI systems from accessing computers without authorization, arguing the company is responsible for the conduct of its agents. In a separate development, Nvidia Corporation recently agreed to acquire Hugging Face for approximately $13 billion.