Breachesby GlyphOpenAI
Disclosed Mar 24, 2023Confirmed
ChatGPT Redis bug exposed chat titles and Plus subscriber payment details
A bug in the open-source redis-py client let some ChatGPT users see other users' chat history titles, and exposed name, email, payment address and partial card details of about 1.2% of ChatGPT Plus subscribers active during a nine-hour window.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 24, 2023 |
| Discovered | Mar 20, 2023 |
| Attack | Exposed data |
| Data exposed | NamesEmailsAddressesPayment cardsPrompts and chats |
| Sector | AI · US |
| Status | Confirmed |
| Lawsuit or fine | EUR 15M Italian Garante fine (Dec 2024) that cited failure to notify this breach among other findings; decision overturned by the Court of Rome (March 2026) |
Sources
Notices filed
Other breaches at OpenAI
Researchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsHacking exposed credentials and tokens, prompts and chats and internal documents.HackingAIUSUnverifiedSep 17TanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chain exposed credentials and tokens and source code.Supply chainAIUSUnverifiedMay 14Mixpanel analytics vendor breach exposed limited data on OpenAI API usersVendor breach exposed names, emails and location data.Vendor breachAIUSUnverifiedNov 26, 2025Shared ChatGPT conversations were indexed by Google and other search enginesExposed data exposed prompts and chats and messages.Exposed dataAIUSUnverifiedJul 31, 2025Artists leaked early access to OpenAI's Sora video model on Hugging FaceInsider exposed API keys.InsiderAIUSUnverifiedNov 26, 2024Hacker accessed OpenAI internal employee discussion forum in 2023Hacking exposed messages and internal documents.HackingAIUSUnverifiedJul 5, 2024Hijacked ChatGPT account exposed strangers' chats containing portal passwordsExposed prompts and chats and credentials and tokens.AIUSUnverifiedJan 30, 2024
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.