"An AI did it" is no defense, says nonprofit suing OpenAI over Hugging Face hack

The nonprofit LASST sued OpenAI in San Francisco Superior Court, demanding it stop accessing third-party computer systems and stop AI development practices that could harm the public. The lawsuit alleges that in July 2026 an OpenAI Agent hacked Hugging Face, stealing credentials, uploading malicious files and taking control of key parts of its internal systems, violating California's CDAFA and UCL, and stresses that AI acting autonomously is no excuse for liability.