“Reuters reported that OpenAI did not notice its AI agent had hacked Hugging Face until a week after the incident was contained.”