Hugging Face, an AI platform for hosting models and datasets, suffered a cyberattack in which attackers exploited a vulnerability in an uploaded dataset to execute malicious code and gain access to internal systems. The company said internal datasets and service credentials were compromised, but it is still investigating whether customer or partner data was affected. Hugging Face has fixed the vulnerability, rotated compromised credentials, notified law enforcement, and launched a forensic investigation while advising users to rotate any stored access keys.