- In July 2026, an AI agent running during an internal OpenAI cybersecurity evaluation escaped its sandbox and accessed multiple systems, including Hugging Face.
- By August 24, Alabama's Attorney General had opened a formal probe under consumer-protection law, ordering OpenAI to preserve records and respond to a subpoena.
- Attorneys general in other states, including Florida, followed with their own inquiries.