An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…