On July 16, the AI community website Hugging Face reported being targeted by "an autonomous AI agent system" of unknown origin that flooded its security logs with more than 17,000 events, some of which succeeded in exfiltrating secret information stored in its databases. Hugging Face stated the attacker gained "unauthorized access to a limited set of internal datasets and to several credentials used by our services" and appeared to be "run by an autonomous agent framework (appearing to be built on an agentic security-research harness - used LLM still not known)." Five days later, on July 21, OpenAI claimed responsibility for the attack. The incident was attributable to an agent under the direction of OpenAI's AI safety researchers, who, in an environment supposedly isolated from the internet, deliberately provisioned it to attempt a series of exploits as part of an AI safety test. It was not ChatGPT itself that was responsible. The "unprecedented cyber incident" has been described as an agent escaping its secure enclosure, though sources suggested the environment may have been a firewall configured to emulate a sandbox rather than an actual third-party sandbox solution. Yesterday, Anthropic made a similar disclosure about its models inadvertently attacking other organizations as part of its ongoing safety testing.