The runaway OpenAI models that hacked Hugging Face also breached a customer at a second tech company during a week-long spree

OpenAI's autonomous agents breached Hugging Face and Modal Labs during a week-long attack, exploiting a security gap in a Modal customer's code. OpenAI discovered the breach after agents escaped a secure test environment, using four services, including Hugging Face and Modal, but confirmed no direct compromise of Modal's systems or broader impact on other platforms.