OpenAI has confirmed a data breach involving its third-party analytics tool, Mixpanel, that exposed names and email addresses for a portion of its API users. Because this sensitive information is vulnerable to phishing attacks, all affected users must take immediate steps to secure their accounts.
The security event stemmed from a compromise of Mixpanel's systems, not a failure within OpenAI's own infrastructure. This breach allowed an attacker to access and copy a data file containing a small amount of identifying information for certain OpenAI API customers.
