What is the official website of Hugging Face ?

The official website of Hugging Face is https://huggingface.co.

What is Hugging Face's cybersecurity risk score?

Hugging Face has an AI-generated cybersecurity risk score of 494 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Hugging Face experienced?

According to Rankiteo, Hugging Face currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hugging Face been affected by any supply chain cyber incidents ?

According to Rankiteo, Hugging Face has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: OpenAI (Incident ID: CHE1784787889) OpenAI (Incident ID: HUGOPE1784680106) OpenAI (Incident ID: HUG1784399023) marimo (Incident ID: MARHUG1779193669) Ruby Central, Inc. (Incident ID: OPERUBHUG1789230262) OpenAI (Incident ID: OPEHUG1784831064)

Does Hugging Face have SOC 2 Type 1 certification ?

According to Rankiteo, Hugging Face is not certified under SOC 2 Type 1.

Does Hugging Face have SOC 2 Type 2 certification ?

According to Rankiteo, Hugging Face does not hold a SOC 2 Type 2 certification.

Does Hugging Face comply with GDPR ?

According to Rankiteo, Hugging Face is not listed as GDPR compliant.

Does Hugging Face have PCI DSS certification ?

According to Rankiteo, Hugging Face does not currently maintain PCI DSS compliance.

Does Hugging Face comply with HIPAA ?

According to Rankiteo, Hugging Face is not compliant with HIPAA regulations.

Does Hugging Face have ISO 27001 certification ?

According to Rankiteo,Hugging Face is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hugging Face operate in ?

Hugging Face operates primarily in the Software Development industry.

How many employees does Hugging Face have ?

Hugging Face employs approximately 726 people worldwide.

Does Hugging Face own any subsidiaries ?

Hugging Face presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hugging Face have ?

Hugging Face's official LinkedIn profile has approximately 35,000 followers.

What is the NAICS classification code for Hugging Face ?

Hugging Face is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Hugging Face have a Crunchbase profile ?

Yes, Hugging Face has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/hugging-face.

Does Hugging Face have a LinkedIn profile ?

Yes, Hugging Face maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/huggingface.

How many cybersecurity incidents has Hugging Face experienced ?

As of September 19, 2026, Rankiteo reports that Hugging Face has experienced 11 cybersecurity incidents.

How many peer or competitor companies does Hugging Face have ?

Hugging Face has an estimated 30,983 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hugging Face faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hugging Face

Boost Score +25 with badge (5 left)

494

/1000

Critical

519

/1000

Critical

Hugging Face Vendor Cyber Rating & Cyber Score

huggingface.co

cb in

Add Your Compliance Badge

The AI community building the future.

Hugging Face

Hugging Face CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Hugging Face

Cyber Attack

9/2026

OPESNOSALHUG178...

Hugging Face

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Hugging Face

Breach

7/2026

OpenAI

HUGOPE178468010...

Hugging Face

Breach

7/2026

OpenAI

HUG1784399023

Hugging Face

Cyber Attack

5/2026

marimo

MARHUG177919366...

Hugging Face

Cyber Attack

5/2026

Ruby Central, I...

OPERUBHUG178923...

Hugging Face

Vulnerability

100

4/2026

HUG1777387852

Hugging Face

Vulnerability

100

3/2026

HUG1780734439

Hugging Face

Cyber Attack

100

1/2026

OpenAI

OPEHUG178483106...

Hugging Face

Cyber Attack

7/2025

OPEKNOHUGZIMCHE...

Hugging Face

Breach

1/2025

HUG1784566495

Loading…

A.I.

Hugging Face Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hugging Face

Incidents vs Software Development Industry Avg (This Year)

Hugging Face has 749.06% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Hugging Face has 773.79% more incidents than the average of all companies with at least one recorded incident.

Incident Types Hugging Face vs Software Development Industry Avg (This Year)

Hugging Face reported 9 incidents this year: 4 cyber attacks, 0 ransomware, 3 vulnerabilities, 2 data breaches, compared to industry peers with at least 1 incident.

Incident History - Hugging Face (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hugging Face Subsidiaries

Parent Company

Hugging Face

Software Development

Website: https://huggingface.co

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

Hugging Face Similar Companies

Facebook

meta.com

The Facebook company is now Meta. Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. We want to give people the power to build community and bring the world closer together. To do that, we ask that you help create a safe and respectful online space. These community values encourage constructive conversations on this page: • Start with an open mind. Whether you agree or disagree, engage with empathy. • Comments violating our Community Standards will be removed or hidden. So please treat everybody with respect. • Keep it constructive. Use your interactions here to learn about and grow your understanding of others. • Our moderators are here to uphold these guidelines for the benefit of everyone, every day. • If you are seeking support for issues related to your Facebook account, please reference our Help Center (https://www.facebook.com/help) or Help Community (https://www.facebook.com/help/community). For a full listing of our jobs, visit http://www.facebookcareers.com

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

Amazon

cb aboutamazon.com

Amazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. We are driven by the excitement of building technologies, inventing products, and providing services that change lives. We embrace new ways of doing things, make decisions quickly, and are not afraid to fail. We have the scope and capabilities of a large company, and the spirit and heart of a small one. Together, Amazonians research and develop new technologies from Amazon Web Services to Alexa on behalf of our customers: shoppers, sellers, content creators, and developers around the world. Our mission is to be Earth's most customer-centric company. Our actions, goals, projects, programs, and inventions begin and end with the customer top of mind. You'll also hear us say that at Amazon, it's always "Day 1." What do we mean? That our approach remains the same as it was on Amazon's very first day - to make smart, fast decisions, stay nimble, invent, and focus on delighting our customers.

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

ServiceNow

cb servicenow.com

ServiceNow (NYSE: NOW) makes the world work better for everyone. Our cloud-based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. And we can all create the future we imagine. The world works with ServiceNow. For more information, visit www.servicenow.com.

SS&C Technologies

ssctech.com

SS&C is a leading global provider of mission-critical, cloud-based software and solutions for the financial and healthcare industries. Named to the Fortune 1000 list as a top U.S. company based on revenue, SS&C (NASDAQ: SSNC) is a trusted provider to more than 22,000 financial services and healthcare companies, with over 27,000 employees and operations in more than 35 countries. Built upon a foundation of expertise, innovation and excellent customer service, SS&C powers some of the largest financial and healthcare firms in the world. +++++++++++++++++ ALPS Portfolio Solutions Distributor, Inc., ALPS Advisors, ALPS Funds and SS&C Technologies are affiliated. Distributed by ALPS Portfolio Solutions Distributor, Inc. AN INVESTMENT IN THE FUNDS INVOLVES RISK, INCLUDING LOSS OF PRINCIPAL. AN INVESTOR SHOULD CONSIDER INVESTMENT OBJECTIVES, RISKS, CHARGES AND EXPENSES CAREFULLY BEFORE INVESTING. TO OBTAIN A PROSPECTUS, WHICH CONTAINS THIS AND OTHER INFORMATION, CALL 1.877.398.8461 OR VISIT WWW.ALPSFUNDS.COM. READ THE PROSPECTUS CAREFULLY BEFORE INVESTING.

Shopify

cb shopify.com

Shopify is a leading global commerce company, providing trusted tools to start, grow, market, and manage a retail business of any size. Shopify makes commerce better for everyone with a platform and services that are engineered for reliability, while delivering a better shopping experience for consumers everywhere. Shopify powers millions of businesses in more than 175 countries and is trusted by brands such as Allbirds, Gymshark, PepsiCo, Staples, and many more. Find all our jobs here: www.shopify.com/careers

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

Loading…

NEWS

Hugging Face CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 24, 2026 08:00 AM

Threat Actors Weaponized AI Tools to Gain Full Domain Access within 30 Minutes

AI-powered attacks surged 89% in 2025, with breakout times dropping to 29 minutes, accelerating network intrusions globally.

Read Article

February 14, 2026 08:00 AM

Android malware hidden in fake antivirus app

If you use an Android phone, this deserves your attention. Right now, cybersecurity researchers warn that hackers are using Hugging Face,...

Read Article

February 03, 2026 08:00 AM

Hackers Used Hugging Face to Distribute Android Banking Trojans

Cybersecurity researchers uncovered a sophisticated malware campaign that exploited Hugging Face's trusted AI infrastructure to distribute...

Read Article

February 03, 2026 08:00 AM

Hugging Face Repositories Used to Spread Android RAT Malware

Attackers have exploited Hugging Face repositories to distribute Android RAT malware disguised as a security app, hosting thousands of...

Read Article

February 03, 2026 06:00 AM

Android Security Alert: Fake Apps Abuse Hugging Face to Spread Spyware

Cybersecurity researchers are warning that the current AI boom has opened a new and dangerous attack surface on Android devices.

Read Article

February 02, 2026 08:00 AM

Hugging Face Repositories Abused in New Android Malware Campaign

Attackers exploited Hugging Face's trusted infrastructure to spread an Android RAT, using fake security apps and thousands of malware...

Read Article

February 02, 2026 08:00 AM

Cybercriminals hijack AI hosting service to compromise users

Bitdefender researchers have uncovered an Android remote access trojan campaign that highlights how legitimate developer platforms can be...

Read Article

January 31, 2026 08:00 AM

Hugging Face platform abused to spread Android malware variants

An Android RAT (remote access trojan) campaign combines social engineering, the resources of the Hugging Face online platform as staging,...

Read Article

January 30, 2026 08:00 AM

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

Android malware spreads via fake security alerts, tricking users to install TrustBastion that gives attackers full device control.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-93740

SUMMARY

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Published

Date2026-09-18

Updated

Date2026-09-18

RISK INFORMATION (Score: 10)

cvss2

Base Score: 10.0

Complexity: LOW

AV:N/AC:L/Au:N/C:C/I:C/A:C

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-93739

SUMMARY

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Published

Date2026-09-18

Updated

Date2026-09-18

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-75885

SUMMARY

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).

Published

Date2026-09-18

Updated

Date2026-09-18

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Impact Score

4.7

Exploitability

3.9

REFERENCES

CVE-2026-93894

SUMMARY

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability requires prior knowledge about the VCL in use and the ability to craft a request that contains a string that is long enough to fill the remaining workspace at the call site while staying under the different request size limits (http_req_size, http_req_hdr_len, etc.).

Published

Date2026-09-18

Updated

Date2026-09-18

RISK INFORMATION (Score: )

cvss4

Base Score: 2.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:L/U:Clear

Impact Score

Exploitability

REFERENCES

https://vinyl-cache.org/security/VSV00020.html

CVE-2026-93738

SUMMARY

A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Published

Date2026-09-18

Updated

Date2026-09-18

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Hugging Face Vendor Cyber Rating & Cyber Score

Hugging Face A.I CyberSecurity Scoring

Hugging Face CyberSecurity News & History

Hugging Face Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Hugging Face

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Hugging Face vs Software Development Industry Avg (This Year)

Incident History - Hugging Face (X = Date, Y = Severity)

Hugging Face Subsidiaries

Parent Company

Hugging Face

Hugging Face Similar Companies

Facebook

LinkedIn

Amazon

Baidu, Inc.

Meta

ServiceNow

SS&C Technologies

Shopify

Lazada

Hugging Face CyberSecurity News

Threat Actors Weaponized AI Tools to Gain Full Domain Access within 30 Minutes

Android malware hidden in fake antivirus app

Hackers Used Hugging Face to Distribute Android Banking Trojans

Hugging Face Repositories Used to Spread Android RAT Malware

Android Security Alert: Fake Apps Abuse Hugging Face to Spread Spyware

Hugging Face Repositories Abused in New Android Malware Campaign

Cybercriminals hijack AI hosting service to compromise users

Hugging Face platform abused to spread Android malware variants

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Hugging Face CyberSecurity News & History

Hugging Face Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Hugging Face

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Hugging Face vs Software Development Industry Avg (This Year)

Incident History - Hugging Face (X = Date, Y = Severity)

Hugging Face Subsidiaries

Parent Company

Hugging Face

Hugging Face Similar Companies

Facebook

LinkedIn

Amazon

Baidu, Inc.

Meta

ServiceNow

SS&C Technologies

Shopify

Lazada

Hugging Face CyberSecurity News

Threat Actors Weaponized AI Tools to Gain Full Domain Access within 30 Minutes

Android malware hidden in fake antivirus app

Hackers Used Hugging Face to Distribute Android Banking Trojans

Hugging Face Repositories Used to Spread Android RAT Malware

Android Security Alert: Fake Apps Abuse Hugging Face to Spread Spyware

Hugging Face Repositories Abused in New Android Malware Campaign

Cybercriminals hijack AI hosting service to compromise users

Hugging Face platform abused to spread Android malware variants

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?