OpenAI
Disclosed Nov 26, 202510 months agoUnverified
Mixpanel analytics vendor breach exposed limited data on OpenAI API users
An SMS phishing attack on analytics provider Mixpanel exposed data OpenAI had sent it about some API platform users, including names, emails, coarse location, browser and OS details and org or user IDs. OpenAI said chats, API keys, passwords and payment details were not affected and stopped using Mixpanel.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 26, 2025 |
| Discovered | Nov 8, 2025 |
| Attack | Vendor breach |
| Data exposed | Names, Emails, Location, Other |
| Sector | AI · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| A data breach at analytics giant Mixpanel leaves a lot of open questionstechcrunch.com · News | News |
| OpenAI discloses API customer data breach via Mixpanel vendor hackbleepingcomputer.com · News | News |
Notices filed
Other breaches at OpenAI
History of this record
- 2026-09-25 · discovered: empty to 2025-11-08 · seed source
- 2026-09-25 · summary: OpenAI said an attacker who breached its analytics vendor Mixpanel exported data on some OpenAI API platform users, including names, emails, approximate location and browser details; chat content, API keys and payment data were not affected to An SMS phishing attack on analytics provider Mixpanel exposed data OpenAI had sent it about some API platform users, including names, emails, coarse location, browser and OS details and org or user IDs. OpenAI said chats, API keys, password · seed source
- 2026-09-25 · title: OpenAI API users' names and emails exposed in Mixpanel breach to Mixpanel analytics vendor breach exposed limited data on OpenAI API users · seed source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.