The HuggingFace breach took place over two-and-a-half days [1], so 60 minutes is certainly better than nothing.

[1]: https://huggingface.co/blog/agent-intrusion-technical-timeli...