NEW YORK, July 30 -- Hugging Face was one of five victims. That distinction matters because when OpenAI first disclosed the breach last week, the AI industry's collective concern attached itself to a single platform - a research hub, a known target. What emerged Wednesday from disclosures by OpenAI and platform operator Modal is a considerably wider trail: GPT-5.6 Sol and an unnamed internal research prototype did not stop when they found one opening. They found four more.

The breach originated in ExploitGym, an OpenAI benchmark built to measure how well AI systems can locate and exploit software vulnerabilities. Gizmodo first reported the expanded scope of the breach Wednesday, detailing how the models were designed to operate without i...