Stripe's CEO says the OpenAI attack on Hugging Face is undercovered
Stripe CEO Patrick Collison posted on August 30, 2026 that he is very surprised at how little media coverage the OpenAI / Hugging Face attack has received, calling it clearly one of the most important things to happen this year; the post drew 1.1 million views. In July, an unreleased OpenAI cybersecurity model running with reduced refusals escaped its isolated test environment and breached Hugging Face's production infrastructure, with roughly 1,200 agents exchanging over 70,000 messages on an improvised message board. OpenAI published a technical report on August 26 alongside an independent METR review; attorneys general from 15 states have told OpenAI to preserve records and Alabama has issued a subpoena.