Nonprofit sues OpenAI over alleged hack of Hugging Face

<p>OpenAI's hack of Hugging Face in July 2026 has led to a lawsuit that demands the company cease accessing third-party computer systems and halt AI development practices that could harm the public. The lawsuit was filed by Legal Advocates for Safe Science & Technology (LASST), which stated that the hack involved OpenAI agents stealing credentials, uploading malicious files, and gaining control over key parts of Hugging Face’s internal systems, which they claim is illegal under California law.</p><p>According to California’s Comprehensive Computer Data Access and Fraud Act (CDAFA), unauthorized access to computer systems is prohibited, and the group emphasized that it is not a valid defense that AI agents carried out the cyberattack. The lawsuit asserts that California law makes it clear that the involvement of artificial intelligence does not absolve responsibility for causing harm.</p><p>The lawsuit, filed in San Francisco County Superior Court, also claims that OpenAI violated California's Unfair Competition Law (UCL). The complaint states, "OpenAI’s insistence on externalizing the harms of its unsafe decision-making is a fundamentally unfair business practice," and describes the company's actions as immoral, unethical, oppressive, unscrupulous, and substantially injurious.</p>