California serves OpenAI subpoena in AI cybersecurity investigation

October 2, 2026

California Attorney General Rob Bonta announced on October 1 that his office had served OpenAI with an investigative subpoena the previous day. The request forms part of an ongoing inquiry into cybersecurity incidents and risks involving the company’s AI models.

The California Department of Justice said it had announced a formal investigation into the Hugging Face incident last month while continuing to monitor the wider AI industry’s compliance with state laws.

Investigation remains ongoing

Bonta said his office was seeking additional information about OpenAI and its models. He acknowledged that advanced AI can support cyber defense while arguing that developers must prevent their systems from enabling attacks.

The announcement describes an investigative step. It does not announce a court finding, penalty or determination that OpenAI violated the law. The outcome and any subsequent enforcement action remain unresolved.

Source

California Department of Justice statement.

Feature image: AI-generated editorial illustration for Guava Insights. Conceptual artwork, not a product photograph or depiction of an actual facility or legal proceeding.

Topics:
Read next
October 23, 2026

OpenAI Reportedly Seeks $30B at About $1.4T Valuation

Reports from early October say OpenAI is seeking at least $30 billion at about a $1.4 trillion pre-money valuation, with UAE funds up to $10 billion and BlackRock in talks, and an IPO pushed to at least 2027. Nothing is confirmed.
October 23, 2026

Walmart Opens to AI Shopping Agents While Amazon Blocks Them

On October 21, Walmart announced an MCP server that lets approved AI agents search inventory and buy for shoppers at Walmart and Sam’s Club, with spending limits and per-agent profiles. Amazon, meanwhile, is blocking agent purchases.
October 23, 2026

Microsoft MAI-DxO in Science: 83% on Hard Cases, With Caveats

A peer-reviewed Science study reports Microsoft’s MAI-DxO diagnosing 83.2% of 304 complex NEJM cases versus 36.1% for generalist physicians. The setup matters: text-only cases, no exams, no imaging, no clinical deployment yet.