Hugging Face closes dataset flaws after breach reaches internal clusters
The AI hub says credentials were compromised, customer exposure remains under review, and users should rotate tokens stored on the platform.
By Ryan Merket · Published
Primary source: TechCrunch
Why it matters
Hugging Face turned open publishing into critical AI infrastructure. The breach shows that uploaded datasets can carry executable risk into credentials and internal clusters, forcing AI hubs to isolate community content like untrusted software.
Hugging Face, built by Clement Delangue (@ClementDelangue), Julien Chaumond (@julien_c), and Thomas Wolf (@Thom_Wolf), closed two dataset-processing vulnerabilities after an attacker reached several internal clusters and obtained service credentials in mid-July.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.