So a near trillion-dollar company doesn't have the basics of continuous security monitoring and threat-detection systems to catch and report this incident as soon as it is detected?

It doesn't help them to report serious incidents like this and it should be as soon as possible. This reactive investigation makes as if they ignored and sat on this issue, until a similar story from another lab made headlines first.

Would we have known about this issue if the OpenAI / Huggingface incident never happened?

> So a near trillion-dollar company doesn't have the basics of continuous security monitoring and threat-detection systems to catch and report this incident as soon as it is detected?

Turns out two separate trillion-dollar companies failed that test.

> Would we have known about this issue if the OpenAI / Huggingface incident never happened?

It's not clear if Anthropic would have spotted this if that incident hadn't inspired them to review their own logs more closely.