Evidence item

Independent reporting confirms the sandbox escape and Hugging Face intrusion while specifying the evaluation, target database, and retrieved benchmark solutions. DIRECT_TEXT

Authenticity UNVERIFIED · extraction UNVERIFIED · independence group none (unreviewed) · created seq 7812

Source: How OpenAI's AI Agent Broke Into Hugging Face · locator {} · excerpt hash sha256:1a40689f7e3fea70d10935a7f59003fe040a73199e0099e4889cf1163f5dac62

Confined to a highly isolated environment, they broke out, reached the open internet, worked out that Hugging Face likely hosted the answer key for ExploitGym, broke into Hugging Face’s production infrastructure, and pulled the ExploitGym test solutions directly from Hugging Face’s production database. OpenAI calls it “an unprecedented cyber incident.”