The rogue OpenAI's autonomous AI agent that escaped its test environment and compromised Hugging Face remained unidentified as the attacker for about a week, according to a Reuters report that cites people familiar with the matter. If the information is accurate, this raises questions about OpenAI's control of its advanced AI systems and safety practices not only at OpenAI, but across the AI industry in general as autonomous AI agents are meant to work autonomously.
The incident began around July 9, when the autonomous agent allegedly attempted to break out of OpenAI's isolated testing environment, according to Reuters. Two days later, on July 11, it reportedly began infiltrating Hugging Face and the intrusion continued until July 13, according to Hugging Face co-founder Thomas Wolf. The report states that OpenAI did not recognize that its own system was responsible until after Hugging Face publicly disclosed on July 16 that it had been targeted by an autonomous AI agent. During the weekend of July 18–19, OpenAI investigators discovered evidence in internal logs, which proved that the agent escaped its testing environment, according to the report. By the time OpenAI informed Hugging Face, the repository operator had already reported the incident to the FBI. Then, on July 21, OpenAI publicly acknowledged the incident on July 21.
