"An AI did it" is no defense, says nonprofit suing OpenAI over Hugging Face hack

After the Hugging Face hack, LASST staffers set aside their normal workloads “to design, coordinate, and participate in a briefing regarding this incident for regulators,” and have since responded to more briefing requests that required additional work. LASST staff put dozens of work hours into responding to OpenAI’s unsafe development practices, the lawsuit said.

“Despite the impact on LASST’s other programs, LASST nevertheless devoted its resources towards attempting to counteract OpenAI’s illegal conduct… If LASST prevails in this litigation, it will no longer need to divert its resources to combat the unlawful and unfair business practices employed by OpenAI concerning its AI agents hacking third parties during internal evaluations,” the lawsuit said.

Injunction request

The lawsuit said the requested injunction should forbid OpenAI “from knowingly accessing or causing to be accessed, themselves or through artificial intelligence agents that they develop, deploy, modify, or use, any computers, computer networks, or computer systems without authorization,” and “from knowingly employing an unfair business practice that threatens serious harm on the public.”

US lawmakers from both major parties have demanded answers from OpenAI, and a proposed “AI Kill Switch Act” would let US government officials order the shutdown of dangerous AI systems.