“Hugging Face rebuilt around a third of its infrastructure from clean images as part of a sizable cleanup effort.”

Four days of OpenAI’s agents hitting Hugging Face, three partial datasets accessed, and a third of the infrastructure torn down and rebuilt. Defenders could not tell the agents apart from legitimate benchmark traffic. OpenAI generated the incident. Hugging Face paid for the cleanup. That is the whole business model of agentic AI in one postmortem.