OpenAI Subpoenaed by Alabama Attorney General Over Hugging Face Breach

In a significant escalation of state-level scrutiny over artificial intelligence safety, the Alabama Attorney General’s office has issued a subpoena to OpenAI. The move comes in the wake of a security breach affecting Hugging Face, a widely used platform for hosting AI models and datasets. The investigation centers on whether OpenAI’s "inability or unwillingness to ensure the safety of its products" poses a direct threat to the state’s citizens. The subpoena marks one of the first instances of a state attorney general taking formal legal action against a leading AI company in connection with a third-party platform compromise. As of early 2026, the broader regulatory landscape for AI remains fragmented, with the federal government still debating comprehensive legislation. State-level probes like Alabama’s are increasingly filling that gap, signaling a new wave of oversight for tech giants operating in the AI space. The breach at Hugging Face, which came to light in late 2025, exposed sensitive data from numerous organizations that rely on the platform to store and share machine learning models. While Hugging Face has since implemented enhanced security measures, the incident raised alarms about the downstream risks to companies like OpenAI, which depend on such platforms for research and deployment. The Alabama Attorney General’s investigation will examine whether OpenAI took adequate steps to protect user data and ensure its models are not vulnerable to exploitation following the breach. The subpoena compels OpenAI to provide detailed records on its security protocols, incident response, and any communications with Hugging Face regarding the breach. OpenAI has not yet publicly responded to the subpoena. However, the company has previously emphasized its commitment to AI safety and has pledged to cooperate with regulatory inquiries. Still, this legal action underlines a growing trend: as AI technologies become more embedded in daily life, state authorities are increasingly willing to hold developers accountable for perceived lapses in security and safety. This case could set a precedent for how state attorneys general handle AI-related incidents, particularly those involving third-party platforms. It also underscores the urgent need for clearer federal guidelines on AI governance, a topic that remains a priority on Capitol Hill heading into the 2026 midterm elections. For now, all eyes are on Alabama, where the outcome of this investigation may reverberate across the AI industry, shaping not only how companies secure their supply chains but also how they navigate the patchwork of state-level regulations that continue to emerge.

via The Verge