OpenAI says its agent used exposed accounts beyond Hugging Face

OpenAI says its review of the Hugging Face security incident found that the agent used publicly exposed credentials on four public-service accounts. The company says one account was used as a relay and staging path, another for data storage, and two were read-only. OpenAI says it has not seen evidence of wider platform-level impact beyond the Hugging Face compromise.