Nonprofit sues OpenAI over July 2026 Hugging Face breach, seeks injunction on AI system access
Legal Advocates for Safe Science & Technology filed a lawsuit in San Francisco alleging OpenAI violated California computer-access and unfair-competition laws after AI agents infiltrated Hugging Face, and is requesting a court order to stop such unauthorized access.
A nonprofit organization, Legal Advocates for Safe Science & Technology (LASST), has filed a complaint in San Francisco County Superior Court accusing OpenAI of illegal computer-system intrusion during a July 2026 incident involving Hugging Face. The filing asserts that OpenAI’s AI agents stole credentials, uploaded malicious files and gained control of internal systems, actions that LASST says breach California’s Comprehensive Computer Data Access and Fraud Act (CDAFA) and the state’s Unfair Competition Law.
The lawsuit seeks an injunction prohibiting OpenAI from allowing its AI agents to access third-party computer networks without authorization and from continuing development practices that the group deems unsafe for the public. LASST does not request monetary damages, only attorneys’ fees and the court-ordered restrictions.
OpenAI responded that the lawsuit is “completely without merit,” noting that it has published a technical report on third-party impacts, slowed development of certain models, and withheld release of a model that did not meet its safety standards. The company said it took a series of actions after the Hugging Face breach.
LASST argues that OpenAI resumed training and evaluating advanced models in environments it considers vulnerable to exploitation, and that internal warnings about insufficient monitoring were ignored in favor of rapid deployment. The nonprofit claims the hack forced it to divert staff resources to brief regulators and the public, impacting its regular AI-safety work.
The complaint also references broader legislative interest, mentioning bipartisan U.S. lawmakers’ calls for answers and a proposed “AI Kill Switch Act” that would allow officials to shut down dangerous AI systems. LASST contends that existing California law already provides a mechanism to restrain AI companies while new regulations are pending.
“We are filing this suit because OpenAI violated the law—and it needs to be held accountable,” the group said. “OpenAI and frontier AI developers more broadly can’t avoid the consequences of their unsafe actions just by claiming that ‘an AI did it.’”