Truffle Security scans 7.6 petabytes of HuggingFace AI training data, finds 221,303 live credentials including GitHub tokens that can push malicious code into widely-used software and access to 3.7% of global population's PII.

Scanning 7.6 Petabytes of HuggingFace Training Data for Secrets ◆ Truffle Security Co.

tl;dr We scanned every public dataset on Hugging Face, which is where most open AI training data lives. That came to 7.6 petabytes across 187 million files, the largest secret scan of AI training data we know of. We found 221,303 live, unique credentials sitting in 6,003 datasets.One of the highest-impact secrets we found had access to 393 GB of PII covering what we estimate to be roughly 3.7% of the global population. More on this will come in a dedicated follow-up. The rest of the scan shows h...