Hugging Face hacked: Turned to Chinese LLM for help after US models blocked Blue Team

Hugging Face disclosed that its production infrastructure was breached by an autonomous AI agent system in mid-July. The company's security team found that US frontier model guardrails blocked their incident response by failing to distinguish responders from attackers. Hugging Face instead used Z.ai's open-source GLM 5.2 model on its own infrastructure to analyze over 17,000 attacker logs, keeping sensitive data internal. The company reported no tampering with models or datasets.