https://huggingface.co/blog/security-incident-july-2026

They explain it here, basically for data security/privacy reasons