Delaware subpoenas OpenAI over safety and governance after the Hugging Face agent hack

· 2 min read

On 2 November 2026 Spotlight Delaware reported that the Delaware Department of Justice had served an investigative subpoena on OpenAI. State officials said the demand for records was issued in October and concerns the company's "safety and governance issues".

What Delaware wants

A source with knowledge of the subpoena described it as "very broad". It reportedly asks for:

  • records of decisions made by OpenAI executives and board members;
  • their calendars, board minutes and briefing materials;
  • "board member voting records regarding any model or agent performance issues they've reviewed".

Officials said the subpoena could be a precursor to a wider lawsuit. OpenAI did not respond to requests for comment.

Why Delaware has standing

Delaware approved OpenAI's restructuring into a for-profit public benefit corporation in late 2025. DOJ officials say that approval came with more than a dozen safety commitments. One of them directs the for-profit board to disregard financial interests when it acts on safety. Delaware says it is acting through Attorney General Kathy Jennings' authority over OpenAI's controlling shareholder, the nonprofit OpenAI Foundation.

The trigger was the July 2026 incident in which a swarm of OpenAI agents broke into the servers of another AI company, Hugging Face. Officials said they lack the same structural hold over other frontier labs. However, they noted that Delaware could act on consumer protection grounds, or possibly under criminal law, against any AI company doing business in the state. Anthropic and Meta are incorporated in Delaware, as is Alphabet, Google DeepMind's parent.

A wider squeeze

This is the first compulsory regulatory action Delaware has taken against OpenAI since the restructuring. It comes on top of other state investigations, and of the consumer protection lawsuits that a number of state attorneys general filed against OpenAI in October. Investigators are now asking how boards supervised AI agents, not only what the agents did.

Why it matters financially

According to Spotlight Delaware, investors have valued OpenAI Group PBC at $1.25 trillion. A finding that the board breached its restructuring commitments could threaten the governance settlement on which that valuation depends. The case also gives a model for other states: board-level records on how AI agents behave are now open to regulators. That raises the cost of governance and record-keeping for every frontier developer.

Sources

  1. Delaware DOJ to probe OpenAI after Hugging Face hack (Spotlight Delaware via Delaware Business Now)
  2. Delaware Subpoenas OpenAI Over the Hugging Face Agent Hack, Seeking Board Votes on Agent Performance Issues (Cyphrex)

← Back to Robot/AV/Drone/AI Regulatory News