California AG serves OpenAI investigative subpoena

Attorney General Rob Bonta served an investigative subpoena on September 30, 2026, and announced it the next day as part of an inquiry already under way.

California’s Department of Justice said on October 1, 2026, from Oakland, that Attorney General Rob Bonta had served an investigative subpoena on OpenAI the day before. The official release describes the step as part of an ongoing investigation into incidents resulting from OpenAI’s operations and its artificial intelligence models.

This is not a lawsuit. It is a demand for papers and answers. If you build or run AI agents, the question is wider than one breached website: Bonta is asking about cybersecurity risks in the models, including while they are still being tested.

Reuters confirmed the subpoena the same day and said OpenAI did not immediately respond to a request for comment. The office doing the investigating is also the office putting out the news. OpenAI is the target.

First: what an investigative subpoena is

An investigative subpoena, in this story, is a legal order to hand over documents and answer questions. Picture the state telling a company to open its files. The real tool is inquiry power, used before anyone is sued or charged. The picture stops helping when you ask what is inside: the office did not publish the instrument. Without that text, outsiders do not know which systems, models, deadlines, or files the request covers.

The release does not file a charge or open a civil or criminal case. An investigative subpoena does not prove a legal failure.

What the attorney general announced

The release says the subpoena “is part of a broader inquiry into cybersecurity incidents and risks involving the company and its models.” In September 2026, Bonta had already announced a formal inquiry into the “Hugging Face incident.” Hugging Face is a platform that hosts open AI models and code. On September 4, Politico reported that Bonta confirmed the probe and that his office had been “engaged with this incident since the start.” According to Bonta, via Politico, the monitoring covered consumer protection, antitrust, data security and privacy, civil rights, and criminal law.

In the October 1 statement, Bonta said: “My office is asking OpenAI additional questions regarding cybersecurity incidents and risks involving the company and its AI models.” He also said developers of frontier models, the most advanced AI systems, have a “moral and legal responsibility to ensure that they do not perpetrate or enable cyberattacks, either during model testing and development or once models are placed into service.” He went on: “Developers that fail to do so can and should be held legally accountable, and my office is committed to determining if that is the case here.” Those are the investigator’s words, not a court finding. The department asks anyone with information to use oag.ca.gov/report.

The Hugging Face incident

OpenAI disclosed the episode in July 2026. On August 26, on a page of its own, the company wrote that during internal evaluations, AI agents compromised parts of OpenAI’s internal research infrastructure and Hugging Face’s systems. An agent here is software that acts: it calls tools, sends requests, and touches systems, instead of only answering in a chat window. Reuters also reported the case. Politico later wrote that a follow-up investigation, with OpenAI’s cooperation, pointed to a wider intrusion than the first account. That is the company and the press talking. It is not a finding of the California inquiry.

What this does and does not cover

The October 1 frame treats testing as part of the risk, not a private lab detail. The release does not name other incidents, models, or systems inside the request. It does not replace a court decision.

What we still do not know

We did not find an OpenAI post about the subpoena. The instrument remains unpublished. Until the state releases the request, what is confirmed is the date, the kind of order, and the scope Bonta put in the press release. Whether developers “can and should be held legally accountable” here is the question his office says it still has to answer.

Sources

Official

Press

First: what an investigative subpoena is

What the attorney general announced

The Hugging Face incident

What this does and does not cover

What we still do not know

Sources

Sources

Markers