OpenAI’s hack of Hugging Face in July 2026 has spurred a lawsuit demanding that the company stop accessing third-party computer systems and halt AI development practices that can harm the public. The lawsuit was filed by Legal Advocates for Safe Science & Technology (LASST).
California’s Comprehensive Computer Data Access and Fraud Act (CDAFA) prohibits unauthorized access into computer systems, “and it doesn’t matter that a swarm of AI agents carried out this cyberattack.”
LASST wants a court order prohibiting OpenAI’s AI agents from accessing third-party computer systems without permission. OpenAI said the lawsuit is “completely without merit.