Hugging Face Confirms Breach: Datasets and Access Keys Affected

Colleagues, I’d like to draw your attention to a cybersecurity update: Hugging Face has confirmed an incident affecting internal datasets and service access keys.

According to the company, attackers exploited a vulnerability in an uploaded dataset to execute malicious code on servers and escalate privileges.

Hugging Face has already revoked and updated the compromised credentials. Users are also advised to rotate keys stored on the platform and review accounts for suspicious activity.

The vulnerability used in the attack has now been fixed.

Why this matters: incidents like this show that risks for AI platforms can emerge not only from outside, but also through the tools and data within the ecosystem itself.

Are you checking keys and access rights after news like this?

#cybersecurity #HuggingFace #AI #infosec