2024 Hugging Face — Spaces auth tokens stolen
Data compromised
Authentication tokens; API keys in Spaces secrets
Technical writeup
Unauthorized access to Spaces platform. Hackers stole authentication tokens from Spaces secrets. Second token exposure in 6 months; Dec 2023 had 1,600+ exposed API tokens. Revoked tokens, notified users, implemented KMS.
Root cause
Unauthorized access; token compromise