As Hugging Face explained, OpenAI’s agent performed 17,600 actions over four and a half days: It broke in, did reconnaissance, stole passwords and code, and moved around the company’s infrastructure. Contact Us Do you any more information about OpenAI’s hack against Hugging Face? “Hugging Face could’ve done more detections but to be fair not all [organizations] are doing that well,” said Vincent Yiu, managing director at SYON Security. “Nobody is going to read 17,000 reconstructed actions by hand to work out what happened, so Hugging Face had to build tooling just to reconstruct the timeline.” At that point, Hugging Face combined AI and humans to investigate OpenAI’s LLM-powered hacker.