OpenAI
Disclosed Nov 26, 2024Unverified
Artists leaked early access to OpenAI's Sora video model on Hugging Face
A group of Sora alpha testers and red teamers protesting unpaid work posted a front end on Hugging Face under the name PR-Puppets that let the public generate videos with OpenAI's unreleased Sora model; OpenAI said Sora remained in research preview and rejected the group's accusations.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 26, 2024 |
| Attack | Insider |
| Data exposed | API keysOther |
| Sector | AI · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at OpenAI
Researchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsHacking exposed credentials and tokens, prompts and chats and internal documents.HackingAIUSUnverifiedSep 17TanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chain exposed credentials and tokens and source code.Supply chainAIUSUnverifiedMay 14Mixpanel analytics vendor breach exposed limited data on OpenAI API usersVendor breach exposed names, emails and location data.Vendor breachAIUSUnverifiedNov 26, 2025Shared ChatGPT conversations were indexed by Google and other search enginesExposed data exposed prompts and chats and messages.Exposed dataAIUSUnverifiedJul 31, 2025Hacker accessed OpenAI internal employee discussion forum in 2023Hacking exposed messages and internal documents.HackingAIUSUnverifiedJul 5, 2024Hijacked ChatGPT account exposed strangers' chats containing portal passwordsExposed prompts and chats and credentials and tokens.AIUSUnverifiedJan 30, 2024ChatGPT Redis bug exposed chat titles and Plus subscriber payment detailsExposed data exposed names, emails, addresses, payment cards and prompts and chats.Exposed dataAIUSMar 24, 2023
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.