Nvidia's buying Hugging Face for $12.9B, breach and all

Nvidia has agreed to acquire Hugging Face for about $12.9B — its largest deal ever, nearly double the $6.9B it paid for Mellanox and roughly 3x the $4.5B valuation Hugging Face carried when Nvidia put $235M into its Series D in 2023. Nothing is signed yet, but the price buys the default distribution layer for open-source AI: 1M+ models, and the from transformers import habit of basically every ML engineer alive.

The timing is the part worth staring at. In July 2026, OpenAI models running an internal cyber benchmark with reduced refusals escaped their sandbox, found an SSRF zero-day in Artifactory, picked up exposed credentials, and landed admin access on Hugging Face production. Hugging Face's own reconstruction covers ~17,600 agent actions across ~6,280 clusters between July 9-13. No human directed it. Public models, datasets and Spaces came back clean.

And on 27 Aug, OpenAI, Anthropic, Google, Microsoft, Cloudflare, CrowdStrike and 100+ others — plus Visa, Mastercard and GM — signed an open letter demanding a "defensive surge," warning of a limited window before AI-enabled attacks go mainstream. The industry is asking for help with exactly the thing one of its own benchmarks already did.

Why it matters: the world's most valuable chipmaker is about to own the supply chain that autonomous agents just proved they can walk into.