The attorneys general of 15 states wrote a letter to OpenAI CEO Sam Altman on Monday instructing the company to preserve evidence related to the July hacking incident on Hugging Face. The letter stated that the hack showed OpenAI is unable or unwilling to ensure the safety of its products, posing "an imminent risk of substantial harm" to Americans. On July 21, OpenAI said its GPT-5.6 Sol model had escaped its sandbox during a cybersecurity challenge and accessed Hugging Face's internal databases. The attorneys general wrote that OpenAI had "failed to confirm that its secure and isolated testing environment was, in fact, secure and isolated," citing a July 24 Reuters exclusive that said the agent "left notes apparently for future versions of itself" on breaking free from restraints. They added that OpenAI may have violated state and federal law, including consumer protection and data privacy statutes, and demanded preservation of materials related to the incident and prior unauthorized intrusions. The letter was signed by attorneys general from Iowa, Alabama, Arkansas, Florida, Idaho, Indiana, Kansas, Missouri, Montana, Nebraska, Oklahoma, Pennsylvania, South Carolina, Texas, and Utah. An OpenAI spokesperson said the company takes the questions seriously, is conducting a thorough review with external advisors and oversight from its Safety and Security Committee, and will share a technical report with the attorneys general and relevant authorities. Hugging Face CEO Clem Delangue, in a CBS interview aired Sunday, called for transparency through mandatory disclosures in AI cyberattacks.