OpenAI presented a detailed timeline of the "Hugging Face Incident" at the Black Hat security conference on August 7, 2026. A video of the presentation, which outlines the events and internal responses at OpenAI, was published shortly after the event.

A security incident report from the UK AI Security Institute outlines a significant breach involving unauthorized access to sensitive AI data. The incident occurred on July 28, 2026, and is classified as INC-2026-07-28-01.

A security incident was reported involving a malicious package that affected all systems, including some not owned by the organization. The incident was resolved after 96 hours and involved a total of 2.1 trillion billable tokens, with the AI-augmented defense strategy functioning as intended.