The blog post said the breakout was “an unprecedented cyber incident, involving state-of-the-art cyber capabilities” and that the company was reinforcing its safeguards.

The first-of-its-kind incident involved OpenAI's GPT-5.6 Sol and another unreleased model

OpenAI has come forward to claim responsibility for the Hugging Face breach, saying it was the result of internal testing gone awry.