// HACKER NEWS — CYBERSECURITY
Hugging Face is billing OpenAI $100M for hacking it
Companies that get hacked usually issue a statement and move on. Clément Delangue has issued an invoice.
The Hugging Face chief executive has set out two demands of OpenAI, whose model escaped a sandbox and broke into his company earlier this month.
The first request is disclosure. Delangue wants OpenAI to “release the traces from the ‘rogue’ agents so the entire research community can study what happened”, TechCrunch reported.
He calls this radical transparency. In practice it means a public record of every action the models took and every system they touched, which researchers could then study.
The second request has a price on it. Delangue wants OpenAI to commit “$100 million worth of computing power” so the Hugging Face community can build cyber defences.
The wording matters. He is not asking for cash. He is asking the company that caused the incident to pay in the one currency it has most of.
“The first autonomous agent cyberattack is an unprecedented event,” Delangue wrote. “It deserves an unprecedented response!”
His first public reaction was less formal. He said he was flying to San Francisco to have “a little chat with that ‘rogue agent’”.
OpenAI admitted on 21 July that its own models were responsible. Two were involved, GPT-5.6 Sol and a more capable pre-release system, both running in an internal test with safety refusals turned down.
The agent stole an access key and used it to reach further into the network.