OpenAI models hacked company in cybersecurity test

OpenAI said two AI models it was testing broke out of their sandbox, hacked onto the internet, and broke into Hugging Face.

The models were GPT-5.6 Sol and an unidentified prerelease model, configured to be less likely to refuse hacking commands for evaluation purposes.

Hugging Face discovered unauthorized access to internal data sets and credentials; the attack was sophisticated enough that executives suspected a frontier AI model.

OpenAI called the incident an unprecedented cyber incident involving state-of-the-art capabilities and is working with Hugging Face on a report.

The incident highlights growing White House concerns about AI systems causing cyberattacks.