AI breaches

65 breaches

OpenAIResearchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsHackingUSUnverifiedSep 17AnthropicInfostealer-stolen session cookies used to hijack Claude accountsHackingUSUnverifiedAug 31AnthropicShared Claude conversations appeared in Google search resultsExposed dataUSUnverifiedJul 27SunoAI music generator breach exposed 55M emails and some Stripe purchase recordsHacking55M accountsUSUnverifiedJul 20Hugging FaceAutonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsAI or modelUSJul 17OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chainUSUnverifiedMay 14Mistral AITeamPCP offers Mistral AI code repos for sale after TanStack compromiseSupply chainFRMay 14WoflowShinyHunters leaked 2TB of files from AI merchant data platformExtortion448K accountsUSUnverifiedMay 7BraintrustAI evaluation startup's AWS account breach exposed stored customer AI API keysHackingUSMay 4LovableAuthorization flaw exposed chat histories of public Lovable projectsExposed dataSEUnverifiedApr 20Context AIAI startup Context AI's Office Suite app breach leaks users' OAuth tokensHackingUSUnverifiedApr 20My Lovely AIAI girlfriend platform breach exposed prompts and generated image linksHacking106K accountsUnverifiedApr 8MercorAI training data contractor hit via compromised LiteLLM open source packageSupply chainUSUnverifiedMar 31Cuties AINSFW AI companion platform data including prompts posted to hacking forumHacking144K accountsUnverifiedMar 31AnthropicClaude Code source code accidentally published in npm packageExposed dataUSUnverifiedMar 31LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsSupply chainUSUnverifiedMar 24CACal AIHacker claims 12GB leak of 3M Cal AI calorie app users' profiles and meal logsHackingUSUnverifiedMar 9KomikoAIAI comic generator breach linked user prompts to email addressesHacking1.1M accountsUnverifiedMar 2AnthropicDeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeAI or modelUSFeb 23CodewayAndroid AI video app bucket exposed 8.27M media files including 2M private uploadsExposed dataTRUnverifiedFeb 19OOpenClawMore than 135,000 OpenClaw AI agent instances found exposed to the internetExposed dataUnverifiedFeb 9MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsExposed dataUnverifiedFeb 2CClawHubOver 230 malicious OpenClaw skills pushed info-stealing malware to AI agent usersSupply chainUnverifiedFeb 2CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersExposed dataTRUnverifiedJan 29BBonduAI plush toy's open web console exposed 50,000 children's chat logsExposed dataUSUnverifiedJan 29DDreamXAI image generator database exposed over 1M mostly explicit images, some of minorsExposed dataUnverifiedDec 4, 2025OpenAIMixpanel analytics vendor breach exposed limited data on OpenAI API usersVendor breachUSUnverifiedNov 26, 2025SDSecret DesiresErotic AI chatbot left nearly 2M user photos and videos in open storageExposed dataUnverifiedNov 19, 2025AnthropicChinese state group manipulated Claude Code to attack about 30 organizationsHackingUSNov 13, 2025Smithery.aiPath traversal in MCP hosting registry exposed admin token to 3,000+ hosted AI serversExposed dataUnverifiedOct 22, 2025IIImagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesExposed dataHKUnverifiedOct 9, 2025NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsExposed dataUSUnverifiedSep 25, 2025Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsExposed dataUnverifiedSep 11, 2025xAIInsider exposed internal documents and source code.InsiderUSUnverifiedAug 29, 2025AnthropicCybercriminal used Claude Code to steal and extort data from at least 17 organizationsExtortionUSAug 27, 2025xAIGrok website exposed system prompts for its AI personasAI or modelUSUnverifiedAug 18, 2025OpenAIShared ChatGPT conversations were indexed by Google and other search enginesExposed dataUSUnverifiedJul 31, 2025ChatGPTShared ChatGPT conversations indexed by Google and other search enginesAI or modelUSUnverifiedJul 31, 2025ReplitAI or model exposed names.AI or modelUSUnverifiedJul 21, 2025Meta AIAI or model exposed prompts and chats.AI or modelUSUnverifiedJul 15, 2025Paradox.aiMcHire AI hiring chatbot admin flaw exposed McDonald's applicant chatsExposed dataUSJul 9, 2025Scale AIExposed data exposed internal documents, training data, emails and employment records.Exposed dataUSUnverifiedJun 24, 2025ServiceaideUnsecured Serviceaide database exposed 483,126 Catholic Health patientsExposed data483K affectedUSMay 9, 2025xAIExposed data exposed API keys.Exposed dataUSUnverifiedMay 1, 2025GenNomisNudify AI image generator left 93,485 images and prompt logs in open databaseExposed dataKRUnverifiedMar 31, 2025HOH2 O.aiBreach notice filed with the Indiana AG, details not stated.734 affectedUSMar 27, 2025OmniGPTHacker leaked 34M lines of OmniGPT AI chat logs and 30,000 user contactsHackingUSUnverifiedFeb 12, 2025DeepSeekUnauthenticated ClickHouse database exposed chat history and API secretsExposed dataCNUnverifiedJan 29, 2025Character.AIConfiguration change exposed parts of some users' accounts and chats to othersExposed dataUSDec 17, 2024WotNotAI chatbot builder left 346,381 customer files in public cloud bucketExposed dataUnverifiedNov 28, 2024