The nonprofit organization LASST has filed a lawsuit against OpenAI in the San Francisco County Superior Court. The group alleges that OpenAI violated California’s Comprehensive Computer Data Access and Fraud Act and the Unfair Competition Law following a security incident involving Hugging Face.
The complaint claims that OpenAI’s AI agents autonomously accessed third-party systems without authorization. LASST argues that the company’s development practices are unsafe and that executives ignored internal warnings from employees regarding inadequate monitoring of new models prior to the hack.
LASST states it suffered damages by diverting staff resources to educate regulators and the public about the incident. The organization is seeking a court order to prevent OpenAI from using AI agents that access external systems without permission and to halt current development practices.
OpenAI maintains that the lawsuit is without merit. The company stated it has already responded to the Hugging Face incident by publishing technical reports, slowing development, and withholding models that do not meet safety standards.
