Breachesby GlyphMalicious AI sidebar Chrome extensions
Disclosed Dec 30, 2025Unverified
Two Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chats
OX Security found two Chrome extensions impersonating AITOPIA's AI sidebar, one with a Featured badge and over 600,000 users and another with over 300,000, that sent full ChatGPT and DeepSeek conversations and all open tab URLs to a remote server every 30 minutes.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Dec 30, 2025 |
| Attack | Supply chain |
| Data exposed | Prompts and chatsMessagesOther |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.