Hugging Face – Looking into incident, a malicious user took over Meta's account

twitter.com

12 pointssamwillis3 comments

In case your Twitter is rate limited, or you don't have an account:

> We are looking into an incident where a malicious user took control over the Hub organizations of Meta/Facebook & Intel via reused employee passwords that were compromised in a data breach on another site. We will keep you updated

HF's CEO here. The malicious user has been identified, banned and the orgs have been restored. Sorry for the inconvenience.

Doesn’t haveibeenpwned offer a service where you can check a password hash against known pwned passwords? Maybe it would be possible to proactively prevent use of previously pwned passwords (apologies for the accidental alliteration.)

Reply on news.ycombinator.com