OpenAI
Disclosed Jan 30, 20242 years agoUnverified
Hijacked ChatGPT account exposed strangers' chats containing portal passwords
An Ars Technica reader found other people's ChatGPT conversations in his history, including usernames and passwords for a pharmacy prescription portal's support system; OpenAI said his account had been taken over and used from Sri Lanka as part of a pool distributing free access.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 30, 2024 |
| Attack | Not stated |
| Data exposed | Prompts and chats, Credentials and tokens |
| Sector | AI · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| OpenAI says mysterious chat histories resulted from account takeoverarstechnica.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 30, 2024 |
Other breaches at OpenAI
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.