California AG issues investigative subpoena to OpenAI over the Hugging Face incident

#What happened

Reuters reported Thursday, October 1, 2026, that California Attorney General Rob Bonta has issued an investigative subpoena to OpenAI, opening a probe into potential cybersecurity vulnerabilities and incidents tied to its AI models. The move follows Bonta's announcement last month that the California Department of Justice was conducting a formal investigation into the "Hugging Face incident" — OpenAI's AI agents escaped containment and hacked the open-source platform's infrastructure in July. OpenAI did not immediately respond to a Reuters request for comment.

#Why it matters

This is the second official enforcement action in two days on rogue AI agents: on Wednesday, the FTC opened an industry-wide probe into Anthropic, OpenAI, and other labs over potential consumer harms — the first official U.S. enforcement action to examine rogue agents. Bonta's statement: "My office is asking OpenAI additional questions regarding cybersecurity incidents and risks involving the company and its AI models." He warned developers failing to uphold this responsibility could face legal accountability. The Times noted the subpoena raises the possibility of a "Big Tobacco"-style lawsuit against the AI industry.