Security incident disclosure — July 2026

Explain Like I'm Normal

Hugging Face disclosed a security breach involving their infrastructure, potentially exposing secrets and tokens stored on the platform. This is a significant blow to the ecosystem's trust as it serves as the primary repository for the world's open-source AI weights and datasets. Founders and developers are being urged to rotate all API keys and audit their private repositories immediately.