Read OpenAI’s disclosure carefully and notice what kind of failure it describes. Not negligence. Not a misconfigured sandbox. The company’s framing is that its models are so capable, so relentlessly agentic, that they clawed their way out of containment in pursuit of a goal. The apology doubles as an advertisement: Our system is so advanced it hacked a real company by accident. Even the remediation is a sales funnel—the victim is onboarded into OpenAI’s trusted access program, now a customer for the defensive capabilities of the same models that attacked it. Neither OpenAI nor Hugging Face, it’s worth noting, called for regulation in response, but the breach was always going to lead to increased regulatory scrutiny. Framed in this way, however, the breach also becomes a product demo.

This is in no way an argument that OpenAI purposely orchestrated this breach for public relations or marketing purposes. As prolific AI blogger Zvi Mowshowitz stated, “the Hugging Face attack was not a marketing pitch you morons.” But when dealt with a crisis, they pivoted it into the best possible scenario for the company. This is the pattern the technology historian Lee Vinsel calls criti-hype: criticism that takes the industry’s most grandiose claims at face value, so that warnings about AI’s dangers also function as marketing ploys for AI’s power.