Hugging Face has disclosed a data breach affecting its Spaces platform, a place where developers can create, share, and host different Artificial Intelligence (AI) models, and resources.
In an announcement posted on the community’s website, the company said it detected unauthorized access to its Spaces platform, “specifically related to Spaces secrets”.
“As a consequence, we have suspicions that a subset of Spaces’ secrets could have been accessed without authorization,” the notification states.
Migrating to fine-grained access tokens
To address the problem, the team did what was expected: revoked a number of Hugging Face tokens present in the secrets, and notified affected individuals about the change. It also reported the incident to law enforcement agencies, as well as…