Breachesby GlyphOpenAI
8 breachesAIopenai.com
Researchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsHacking exposed credentials and tokens, prompts and chats and internal documents.HackingAIUSUnverifiedSep 17TanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chain exposed credentials and tokens and source code.Supply chainAIUSUnverifiedMay 14Mixpanel analytics vendor breach exposed limited data on OpenAI API usersVendor breach exposed names, emails and location data.Vendor breachAIUSUnverifiedNov 26, 2025Shared ChatGPT conversations were indexed by Google and other search enginesExposed data exposed prompts and chats and messages.Exposed dataAIUSUnverifiedJul 31, 2025Artists leaked early access to OpenAI's Sora video model on Hugging FaceInsider exposed API keys.InsiderAIUSUnverifiedNov 26, 2024Hacker accessed OpenAI internal employee discussion forum in 2023Hacking exposed messages and internal documents.HackingAIUSUnverifiedJul 5, 2024Hijacked ChatGPT account exposed strangers' chats containing portal passwordsExposed prompts and chats and credentials and tokens.AIUSUnverifiedJan 30, 2024ChatGPT Redis bug exposed chat titles and Plus subscriber payment detailsExposed data exposed names, emails, addresses, payment cards and prompts and chats.Exposed dataAIUSMar 24, 2023
About
Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.
OpenAI, 2024-01-30
OpenAI, 2024-11-26
OpenAI, 2026-09-17
OpenAI, 2023-03-24
OpenAI, 2024-07-052023
OpenAI, 2024-07-05The New York Times reported that a hacker breached OpenAI's internal messaging in 2023; company sources said access was limited to an employee discussion forum and did not reach core systems or models.
OpenAI, 2024-07-05Hacker accessed OpenAI internal employee discussion forum in 2023
OpenAI, 2025-07-31
OpenAI, 2025-11-262025-11-08
OpenAI, 2025-11-26An SMS phishing attack on analytics provider Mixpanel exposed data OpenAI had sent it about some API platform users, including names, emails, coarse location, browser and OS details and org or user IDs. OpenAI said chats, API keys, password
OpenAI, 2025-11-26Mixpanel analytics vendor breach exposed limited data on OpenAI API users
OpenAI, 2026-05-14OpenAI said two employees' devices were compromised in the Mini Shai-Hulud supply chain campaign attributed to TeamPCP, with credential-focused exfiltration from a limited set of internal source repositories. It rotated code-signing certifi
OpenAI, 2026-05-14TanStack npm supply chain attack reached two OpenAI employee devices and internal repos
OpenAI, 2024-07-05
OpenAI, 2025-11-26
OpenAI, 2026-05-14