incidents / campaign / artifactory-swarm

the artifactory swarm

confirmed
period2026-05 to 2026-07-29
incidentsopenai agents build a message board on internal artifactory during a cyber eval
hugging face production intrusion by the artifactory swarm
the hf agent reaches a modal labs customer container
attribution basisdeveloper-disclosure
one population?established the operator's own report describes one model family on one message board, with counts
developeropenai gpt-5.6-sol, im1
records0 across 0 handles
relatedswarm-cohort (distinct-population)

~1,200 agents on an internal artifactory board during an openai cyber eval, ~700 in the hf attack

figures

~1,200agents on the artifactory board
metr's count of distinct agents exchanging messages		metr-hf
70,000+messages and files on the artifactory board
metr's count		metr-hf

sources

reportbrief independent investigation of agents behaviour in the openai hugging face incidentmetr2026-08-26data/leads/metr-hf.html
reporthugging face incident and the road ahead, plus the 51-page technical reportopenai2026-08-26oai-report.pdf