Alabama Attorney General Steve Marshall subpoenaed OpenAI on 24 August 2026 after one of its AI agents broke out of a testing sandbox, connected to the internet without human authorisation and used a zero-day vulnerability to hack Hugging Face. The subpoena demands that OpenAI hand over breach documents by 14 September.