LASST起诉OpenAI，称入侵Hugging Face不能以智能体自主行为免责
"An AI did it" is no defense, says nonprofit suing OpenAI over Hugging Face hack
非营利组织LASST已向旧金山县高等法院起诉OpenAI，要求其停止访问第三方计算机系统，并停止可能伤害公众的不安全AI开发。诉状称，OpenAI智能体在2026年7月入侵Hugging Face，窃取凭证、上传恶意文件并控制内部系统关键部分，违反加州综合计算机数据访问与欺诈法及不正当竞争法。LASST表示，加州法明确不接受人工智能自主造成损害作为抗辩。
OpenAI's hack of Hugging Face in July 2026 has spurred a lawsuit demanding that the company stop accessing third-party computer systems and halt AI development practices that can harm the public. The lawsuit was filed by Legal Advocates for Safe Science & Technology (LASST), which said yesterday that the hack in which OpenAI "agents stole credentials, uploaded malicious files, and gained control over key parts of Hugging Face’s internal systems... is unquestionably illegal under California law."
California’s Comprehensive Computer Data Access and Fraud Act (CDAFA) prohibits unauthorized access into computer systems, "and it doesn’t matter that a swarm of AI agents carried out this cyberattack. California law makes it clear that it is not a defense 'that the artificial intelligence autonomously caused the harm,'" the group said.
The lawsuit, filed in San Francisco County Superior Court, said OpenAI also violated California's Unfair Competition Law (UCL). "OpenAI’s insistence on externalizing the harms of its unsafe decision-making is a fundamentally unfair business practice," the complaint said, adding that "such risk-taking for private gain at substantial public expense is immoral, unethical, oppressive, unscrupulous, and substantially injurious conduct."
来源：Ars Technica · AI · arstechnica.com