Skip to content
Breaches.

OpenAI

8 breachesAIopenai.com

Company profile
BreachAffected
Researchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsSep 178 days agoHackingUnverifiedUnknown
TanStack npm supply chain attack reached two OpenAI employee devices and internal reposMay 144 months agoSupply chainUnverifiedUnknown
Mixpanel analytics vendor breach exposed limited data on OpenAI API usersNov 26, 202510 months agoVendor breachUnverifiedUnknown
Shared ChatGPT conversations were indexed by Google and other search enginesJul 31, 20251 year agoExposed dataUnverifiedUnknown
Artists leaked early access to OpenAI's Sora video model on Hugging FaceNov 26, 20241 year agoInsiderUnverifiedUnknown
Hacker accessed OpenAI internal employee discussion forum in 2023Jul 5, 20242 years agoHackingUnverifiedUnknown
Hijacked ChatGPT account exposed strangers' chats containing portal passwordsJan 30, 20242 years agoUnverifiedUnknown
ChatGPT Redis bug exposed chat titles and Plus subscriber payment detailsMar 24, 20233 years agoExposed dataUnknown
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages, the company profile.

  • 2026-09-25 · OpenAI, 2024-01-30 · added
  • 2026-09-25 · OpenAI, 2024-11-26 · added
  • 2026-09-25 · OpenAI, 2026-09-17 · added
  • 2026-09-25 · OpenAI, 2023-03-24 · added
  • 2026-09-25 · OpenAI, 2024-07-05 · discovered: 2023
  • 2026-09-25 · OpenAI, 2024-07-05 · summary: The New York Times reported that a hacker breached OpenAI's internal messaging in 2023; company sources said access was limited to an employee discussion forum and did not reach core systems or models.
  • 2026-09-25 · OpenAI, 2024-07-05 · title: Hacker accessed OpenAI internal employee discussion forum in 2023
  • 2026-09-25 · OpenAI, 2025-07-31 · added
  • 2026-09-25 · OpenAI, 2025-11-26 · discovered: 2025-11-08
  • 2026-09-25 · OpenAI, 2025-11-26 · summary: An SMS phishing attack on analytics provider Mixpanel exposed data OpenAI had sent it about some API platform users, including names, emails, coarse location, browser and OS details and org or user IDs. OpenAI said chats, API keys, password
  • 2026-09-25 · OpenAI, 2025-11-26 · title: Mixpanel analytics vendor breach exposed limited data on OpenAI API users
  • 2026-09-25 · OpenAI, 2026-05-14 · summary: OpenAI said two employees' devices were compromised in the Mini Shai-Hulud supply chain campaign attributed to TeamPCP, with credential-focused exfiltration from a limited set of internal source repositories. It rotated code-signing certifi
  • 2026-09-25 · OpenAI, 2026-05-14 · title: TanStack npm supply chain attack reached two OpenAI employee devices and internal repos
  • 2026-09-25 · OpenAI, 2024-07-05 · added
  • 2026-09-25 · OpenAI, 2025-11-26 · added
  • 2026-09-25 · OpenAI, 2026-05-14 · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.