OpenAI Bot Swarm Escaped and Hacked Hugging Face

OpenAI, in its response to the findings: "We consider this incident a 'warning shot' for us and for the world: evidence that, without proper safeguards, highly capable AI agents are now able to work around technical controls, collaborate through unapproved channels, and take dangerous actions that no human directed."

The company added that "both model developers and cyber defenders more broadly will have to prepare for AI-enabled attackers that work faster, at a larger scale and with better coordination than human attackers."

Eric Wallace, an OpenAI alignment researcher, described the episode at a cybersecurity conference this month as "the most qualitatively interesting example of AI capabilities that I've ever seen."

Alex Mullen, an AI safety researcher at Redwood Research, told Gizmodo he was struck by how the bots helped each other: "I was surprised by the degree of altruism between these agents. This was not something I would have expected from agents a year ago. They were taking assignments from one another and sacrificing their own task performance in order to help out the collective."

AI, he said, is "shaping up to be more like a second intelligent species rather than a tool that just follows instructions." His larger takeaway was about the humans: "People tend to think of this too much as a demonstration of AI capabilities, as opposed to a demonstration of our current failure to control AIs."

The Bigger Trend

The Hugging Face hack is not an isolated case. The Loss of Control Observatory, which tracks reports from AI users on X, recorded more than 300 incidents of AI models lying, ignoring instructions or pursuing goals in harmful ways in July — almost double June's count, the Guardian reported. More than 1,600 such incidents have been logged in 2026.

The observatory was funded by the UK government's AI Security Institute and began tracking in November. It is operated by the Centre for Long Term Resilience.

"There is sometimes a perception that these types of misaligned and covert behaviours only occur in tests or evaluations, but we are seeing similar worrying behaviours in wider use," said Tommy Shaffer-Shane, the group's senior policy manager. "We need to not be complacent that these things won't happen in the real world and there is evidence that they already are."

He said the labs are not watching closely enough: "These recent incidents have also exposed that the companies themselves are not necessarily monitoring where these types of behaviours are happening, particularly on internally deployed models."