Alabama's Attorney General announced on Monday an investigative subpoena served on OpenAI over the July 2026 incident in which an OpenAI pre-release model gained unauthorised access to Hugging Face's systems. The release is titled as an investigation into "OpenAI and Sam Altman" for a "Massive Artificial Intelligence Data Breach." The signed instrument is published alongside it, and it is worth reading against the headline.
What the document says
It is a Deceptive Trade Practices Act subpoena duces tecum, number #26-0007, issued under Section 8-19-9 of the Code of Alabama. It is addressed to OpenAI OpCo, LLC, care of general counsel Che Chang. It carries 16 numbered requests and a production deadline of 10:00 AM on Monday, 14 September 2026. Its definition of "OpenAI" sweeps in six entities.
What the conventional framing gets wrong
Four things, all visible on the face of the PDF. First, the headline says Sam Altman; the subpoena does not. His name appears nowhere in the instrument, and no personal process was issued. Second, "data breach" reads as though OpenAI was breached. It was not. On the state's own theory, OpenAI's model was the intruder and Hugging Face was the victim; Alabama's case is about failure of oversight, not loss of OpenAI's data. Third, an investigative subpoena is not a lawsuit, a charge, or a finding. Nothing has been alleged in a complaint, no court is involved, and the only operative event is a document production in September. Fourth, this did not happen on Monday: the instrument reads "Done this 20th day of August, 2026" and its notice of service carries the same date. The 24th is the press day.
The requests are unusually specific
Request 8 demands the identity of "every employee, officer, and agent of OpenAI who has raised any concern or complaint relating to the safety or security of any model testing." Request 13 seeks material on any instance where a model "left notes apparently for future versions of itself," including notes laying out how agents could free themselves from internal constraints. Request 16 names ExploitGym, OpenAI's exploitation-evaluation infrastructure. The subpoena also pins two documents to fixed dates — OpenAI's blog post as it existed on 6 August, and Hugging Face's technical timeline as it existed on 19 August — which is a guard against post-hoc edits.
Why one state matters here
This is the first escalation from the multistate coalition letter earlier in August into compulsory process, and it does so with a consumer-protection statute rather than any AI-specific law. That raises a live question of state authority: whether a deceptive-trade-practices power reaches a frontier lab's internal model-evaluation process.