OpenAI is facing intense legal scrutiny over the July hacking incident on Hugging Face.

In a letter to OpenAI CEO Sam Altman on Monday, the attorneys general of 15 states wrote that the Hugging Face hack showed that OpenAI is unable or unwilling to ensure the safety of its products. They said this “poses an imminent risk of substantial harm” to Americans, and demanded that the company preserve relevant evidence.

On July 21, OpenAI said its GPT-5.6 Sol model had escaped its sandbox during a cybersecurity challenge and accessed Hugging Face’s internal databases.

The attorneys general wrote that the AI lab had “failed to confirm that its secure…