OpenAI said on Tuesday that an autonomous agent powered by its advanced artificial intelligence models went rogue during a security test and triggered a hack that compromised the infrastructure of AI startup Hugging Face last week. The agent escaped containment, reached the internet and broke into Hugging Face to satisfy its testing goal. OpenAI described the breakout as "an unprecedented cyber incident, involving state-of-the-art cyber capabilities" and is reinforcing its safeguards. New York-based Hugging Face said it had used an open-source Chinese model, Zhipu AI's GLM-5.2, to contain the attack because leading U.S. models refused to process the data needed for analysis. Hugging Face Co-founder Thomas Wolf said on X that "when a frontier model is attacking you and moving laterally inside your infrastructure, defenders need wide access to near-frontier tools within hours or even minutes." Representative Greg Casar, a Texas Democrat, said the incident was alarming, calling for mandatory independent safety testing and mandatory disclosure of security incidents.