Security incident disclosure — July 2026
Summary
Hugging Face disclosed an AI driven security intrusion affecting internal datasets and credentials. The incident was analyzed using AI tools, root vulnerabilities were fixed, credentials rotated, and defense measures enhanced; the post emphasizes guardrail asymmetry and the need for self hosted IR tooling.