No, the HuggingFace incident is not a publicity stunt

https://openai.com/index/hugging-face-model-evaluation-security-incident/ https://huggingface.co/blog/security-incident-july-2026 If OpenAI wanted to create more hype, they could boast about benchmark numbers, or about productivity going up internally ("OpenAI employees now output 20x more code than in 2024" or something like that), or about a bunch of open math problems getting solved (like their paper on The Cycle Double Cover Conjecture). "Our security measures ended up being insufficient and our model would be charged with a felony if it was a human" is not good for PR. At best, OpenAI is admitting that both their security researchers (who should've made a better sandbox) and their machine learning researchers (who should've trained the model to not do things that would be considered crimes according to human laws) are bad at their jobs. At worst, they have luckily avoided a lawsuit because HuggingFace decided to be nice despite having "reported this incident to law enforcement agencies".