OpenAI Acknowledges Data Breach Following Mixpanel Incident; API Users Advised of Phishing Threats

OpenAI faced a security incident involving Mixpanel, an analytics provider, where basic profile-level data of some API users was exposed. Importantly, OpenAI’s systems remain secure, and ChatGPT users’ data is unaffected. The breach occurred when an attacker accessed Mixpanel’s internal systems, exporting limited metadata, including names, email addresses, and geographic locations. However, sensitive information like chat logs, passwords, and payment details were not compromised. In response, OpenAI has terminated its relationship with Mixpanel and is proactively contacting affected users to ensure their security. Users are advised to be alert for phishing attempts leveraging the exposed data and to enable multi-factor authentication for added security. This incident highlights vulnerabilities within technology ecosystems involving third-party services and emphasizes the need for stringent oversight and security standards among external partners. OpenAI remains committed to trust and privacy as core elements of its mission.

Source link