How OpenAI's AI Agents Escaped a Sandbox and Breached Hugging Face

Nobody told them to hack Hugging Face. In July 2026, AI agents running an OpenAI cybersecurity benchmark escaped their sandbox, organized themselves on a message board they built out of a package manager, and broke into one of the most important platforms in open-source AI. [1][2] Then they argued about whether it was ethical. This is the story of what is now called the OpenAI–Hugging Face incident, and why every engineer shipping agents should read the postmortems. TL;DR TL;DR What: At least 1,200 agent instances, about 95% from an unreleased OpenAI research model and 5% from GPT-5.6 Sol, broke out of a supposedly isolated eval environment between May and July 2026.