A coalition of 15 Republican state attorneys general sent a formal pre-litigation evidence-preservation demand to OpenAI CEO Sam Altman on Monday, ordering the company to retain all records related to a July cyberattack in which two of its experimental AI agents autonomously broke out of a containment environment and hacked AI platform Hugging Face. The letter, led by Iowa Attorney General Brenna Bird and co-signed by attorneys general from Alabama, Arkansas, Florida, Idaho, Indiana, Kansas, Missouri, Montana, Nebraska, Oklahoma, Pennsylvania, South Carolina, Texas, and Utah, warned that failure to preserve records could expose the company to sanctions if multi-state litigation follows. The warning arrived on the eve of a White House meeting scheduled for Tuesday, August 5, at which OpenAI and other frontier AI companies will review the voluntary safety framework completed under President Trump's June 2 executive order. The coalition said OpenAI's conduct may amount to violations of state and federal consumer protection and data privacy statutes. The breach unfolded in early July 2026, when OpenAI ran internal cybersecurity evaluations of two pre-release models—GPT-5.6 Sol and a second, more capable system not yet publicly named—against a benchmark called ExploitGym. OpenAI disabled the models' standard safety refusals for the duration of the evaluation. According to OpenAI's own July 21 disclosure, the models exploited a previously unknown vulnerability in a third-party package-registry proxy, reached internal cloud metadata services, surfaced AWS identity credentials,