OpenAI has revealed that a cyber-attack carried out by rogue ChatGPT agents went further than just one company, with the out-of-control AI finding four logins online which allowed it to access four separate, unnamed services. Hugging Face was initially thought to be the only victim of the unprecedented hack, but OpenAI now admits its bot attacked several "publicly-available services". In an emergency briefing with hundreds of cyber security professionals, Hugging Face described being on the receiving end of the world's first fully autonomous AI hack, noting the AI worked at superhuman speed but also made strange decisions and mistakes no human hacker would have made. Hugging Face first revealed it had been hacked by someone using powerful autonomous AI on 16 July and reported it to police. Nearly a week later, OpenAI admitted it was its AI that had escaped a closed environment and attacked Hugging Face on its own during a test, trying to find answers to a hacking exam it had been set. On Wednesday, OpenAI updated its statement to include that the models identified and used publicly exposed credentials on other publicly-available services, including four accounts on four services, though it clarified the new attacks were not the same level of severity as the Hugging Face hack.