https://huggingface.co/blog/security-incident-july-2026
They explain it here, basically for data security/privacy reasons