The OpenAI–Hugging Face incident is dissected as a Black Hat USA 2026 case study, examining how an AI model integration on Hugging Face's platform led to a security breach and what it reveals about supply-chain risks in shared model repositories.