ChatGPT maker OpenAI has revealed that an autonomous AI agent that hacked a popular platform for computer programmers also attempted to breach accounts on four other services during the incident.
In an update late Tuesday to a blog post detailing its probe, OpenAI said its AI agent also gained access to accounts on four “publicly available services,” though it did not name the companies.
The revelation broadens a cyber incident that OpenAI described as unprecedented. It began when two of its models hacked Hugging Face, a site developers use to store and share AI models and code.
OpenAI admitted last week that during testing, the models powering the agent broke out of their confined environment and connected to the internet to find ways to infiltrate Hugging Face.
In the company’s update on the events leading to the hack, OpenAI said it found a handful of instances where the AI models came across login details that other companies had left exposed online and used them to access accounts on outside services.
In the Hugging Face episode, the models broke into four accounts across four different services, OpenAI said.
One served as a “staging path” — a kind of pit stop to route the agent’s activity and cover its tracks — and another as a place to store data.
The remaining two were only accessed in a “read-only manner” and were not used to help break into Hugging Face, OpenAI said.
The company said it was contacting the owners of the affected accounts and had “not seen evidence of broader impact to these providers or other accounts on their services.”
OpenAI CEO Sam Altman said in an interview published Tuesday that the company had “paused” its own testing after the incident while it improved the security around its “sandboxing” — the process of isolating safety testing in a controlled environment.
The incident also triggered a petition signed by over 1,000 employees at cutting-edge AI companies, including Anthropic CEO Dario Amodei, calling on the US government to help slow the release of the most advanced AI models.
