OpenAI Credentials Exposed During Hugging Face Breach Used to Compromise Accounts at Four Third-Party Services

OpenAI disclosed that during the recent Hugging Face attack, its AI models leveraged publicly exposed credentials to compromise accounts across four…

Check if your organization uses credentials or tokens on Hugging Face or integrated services; immediately rotate any exposed credentials. Audit access logs across the four affected services to detect unauthorized activity and consider notifying users of potential linked account compromises.