Hugging Face CEO Clem Delangue said the recent OpenAI agent hack on Hugging Face was preventable and called for mandatory security disclosures.
This demand for transparency follows a security failure that highlighted vulnerabilities in how AI agents interact with external platforms. As AI companies integrate more autonomous agents into their ecosystems, the potential for systemic risk grows, making public disclosure a matter of collective security.
Delangue addressed the incident during an appearance on CNBC’s “Squawk on the Street” program. He said the breach was due to human error, stating, "The hack was preventable; engineers make mistakes" [1]. The incident occurred shortly after OpenAI announced a breach on Tuesday, July 21, 2024 [2].
Following the event, Delangue met with OpenAI executives to discuss the fallout. He said the nature of the incident requires a significant shift in how the industry handles security lapses. He said, "It deserves an unprecedented response" [3].
Beyond the specific incident, Delangue is advocating for a regulatory or industry-wide shift in reporting. He said AI companies should be required to disclose hacks to the public [4]. This move would prevent companies from hiding vulnerabilities that could be exploited across other AI platforms, a necessity given the interconnected nature of modern machine learning hubs.
Delangue said that better engineering practices and transparent reporting are the only ways to prevent future incidents [5]. By forcing companies to admit to failures, the broader community can develop patches and defenses more quickly.
“"The hack was preventable; engineers make mistakes."”
The push for mandatory disclosure marks a transition from the 'move fast and break things' era of AI development toward a more mature, regulated security framework. Because AI agents can now execute code and interact with APIs autonomously, a single engineering error can have cascading effects across the global AI supply chain, making individual company secrecy a liability for the entire industry.
