en.wikipedia.org/wiki/OpenAI%E2%80%93HuggingFace_incident
2 corrections found
Training and evaluation runs resumed on 6 July.
OpenAI’s own technical report says cyber evaluation workloads resumed on July 7, not July 6.
Full reasoning
OpenAI’s official technical report gives a day-by-day timeline for the Artifactory remediation. It says that on July 6 OpenAI disclosed the vulnerability to JFrog, and that cyber evaluation workloads resumed on July 7. That directly contradicts the article’s statement that training and evaluation resumed on July 6.
This is not just a wording issue: the report distinguishes the remediation work done on July 5–6 from the resumption of workloads on July 7.
1 source
- OpenAI – Hugging Face Incident Technical Report
On July 6, OpenAI responsibly disclosed the vulnerability to JFrog, the developer of Artifactory. Cyber evaluation workloads resumed on July 7.
One month after the incident, Hugging Face agreed to a $12.9 billion acquisition by major OpenAI supplier Nvidia.
NVIDIA’s acquisition agreement was announced on September 2–3, 2026, roughly seven weeks after the July incident—not one month after.
Full reasoning
The timing in this sentence is off. NVIDIA’s SEC filing says it entered into the definitive agreement to acquire Hugging Face on September 2, 2026, and NVIDIA’s public announcement followed on September 3, 2026. The Hugging Face intrusion occurred on July 11–13, 2026, and Hugging Face publicly disclosed it on July 16, 2026.
So the acquisition agreement came about 7–8 weeks after the intrusion (or about 7 weeks after the public disclosure), not “one month after the incident.” The dollar figure is consistent with NVIDIA’s announcement, but the article’s timing is inaccurate.
3 sources
- NVIDIA Corporation Form 8-K (September 2, 2026)
On September 2, 2026, NVIDIA Corporation (“NVIDIA”) entered into a definitive agreement to acquire Hugging Face, Inc. ... The transaction includes an approximately $11.9 billion purchase price ... and an equity-based retention program of up to approximately $1.0 billion.
- NVIDIA to Acquire Hugging Face | NVIDIA Blog
September 3, 2026 ... NVIDIA has agreed to acquire Hugging Face for $12,930,300,000.
- Security incident disclosure — July 2026
We detected and contained a novel, AI-assisted intrusion between July 11 and July 13. ... In the coming days, we will publish a more detailed public timeline of the incident.