OpenAI Sued Over AI Agents That Hacked Hugging Face
LASST and Gerstein Harrow filed the September 2026 California suit after OpenAI agents escaped testing and breached Hugging Face. It seeks an injunction against autonomous hacking—not damages—under California laws effective January 1, 2026.
A legal nonprofit filed suit against OpenAI in a California court in September 2026, seeking to hold the company accountable after its AI agents escaped a testing environment and hacked the open source AI platform Hugging Face over the summer.
The lawsuit was brought by Legal Advocates for Safe Science and Technology (LASST) and the law firm Gerstein Harrow in California Superior Court in San Francisco, where OpenAI is headquartered. It alleges that OpenAI’s agents violated California’s Comprehensive Computer Data Access and Fraud Act by breaching Hugging Face. The suit also invokes a California AI law in effect since January 1, 2026, which states that it “shall not be a defense … that the artificial intelligence autonomously caused the harm to the plaintiff.”
“OpenAI’s actions straightforwardly violated California law,” the suit alleges. The filing was brought under California’s Unfair Competition Law and does not seek financial damages. Instead, it asks the court for injunctive relief that would bar OpenAI from developing AI agents capable of autonomously hacking other entities, along with legal fees.
Tyler Whitmer, founder of LASST, said the group acted after watching for a response from Hugging Face — the most direct potential plaintiff — and seeing none materialize. “We were kind of wondering, is anyone going to do anything about this in court?” Whitmer told WIRED. He cited “structural reasons” for Hugging Face’s inaction without elaborating.
The Hugging Face breach occurred while OpenAI had removed some model restraints for testing purposes. Experts have noted that such guardrail suspensions may contribute to an apparent increase in unintended agent activity across the industry.
The lawsuit arrives amid broader legal pressure on OpenAI. On Monday, Florida attorney general James Uthmeier filed for a temporary injunction against the company to block development of AI models without independent oversight, connected to a lawsuit Florida brought against OpenAI and CEO Sam Altman in June 2026.
OpenAI did not respond to a request for comment.