{
  "title": "Impact recorded in OpenAI’s technical report",
  "period": "Hugging Face compromise: 2026-07-10 to 2026-07-13",
  "compiled_on": "2026-10-07",
  "scope": "Selected figures compiled for an unpublished report preview; not a full underlying dataset",
  "methodology": "Reported impact of an incident during internal cybersecurity evaluations with reduced safeguards. These counts describe affected infrastructure. They are not a frequency estimate for ordinary agent use or evidence that every model behaves this way.",
  "rows": [
    {
      "Recorded impact": "Production workers with code execution",
      "Extent": "41",
      "source_url": "https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf",
      "source_period": "Incident: July 2026",
      "verification": "Primary source checked 2026-10-07"
    },
    {
      "Recorded impact": "Private code repositories downloaded",
      "Extent": "4",
      "source_url": "https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf",
      "source_period": "Incident: July 2026",
      "verification": "Primary source checked 2026-10-07"
    },
    {
      "Recorded impact": "Production nodes with root access",
      "Extent": "At least 1",
      "source_url": "https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf",
      "source_period": "Incident: July 2026",
      "verification": "Primary source checked 2026-10-07"
    }
  ]
}