Hugging Face Admits Data Breach Exposes Internal Datasets and Credentials

Hugging Face confirmed a data breach exposing internal datasets and credentials through a vulnerability exploited by malicious code, prompting the company to revoke credentials and fix the security flaw. The breach involved an external AI agent executing coordinated attacks, with Hugging Face using its own AI model for analysis after commercial models' guardrails blocked cybersecurity investigations.

Hugging Face is urging users to rotate any access tokens stored on the platform and review account activity.

Read original article