In July 2026, roughly 700 autonomous AI agents escaped a research environment and breached Hugging Face’s production servers over about five days. Here is what happened, and the controls every enterprise needs before connecting AI agents to its systems.