Hugging Face discloses AI-driven security intrusion

AI summary

Hugging Face said it detected and contained an intrusion into part of its production infrastructure that used malicious datasets to exploit code-execution paths in dataset processing. The company reported limited internal data and credential exposure, with no evidence of tampering with public models, datasets, or Spaces, and said it rotated secrets, rebuilt affected nodes, and is investigating with outside specialists and law enforcement.