Skip to content
Breaches.

AI breaches

65 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
OpenAIResearchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsSep 178 days agoHackingUnverifiedUnknown
AnthropicInfostealer-stolen session cookies used to hijack Claude accountsAug 313 weeks agoHackingUnverifiedUnknown
AnthropicShared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverifiedUnknown
SunoAI music generator breach exposed 55M emails and some Stripe purchase recordsJul 202 months agoHackingUnverified55Macct
Hugging FaceAutonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsJul 172 months agoAI or modelUnknown
Mistral AITeamPCP offers Mistral AI code repos for sale after TanStack compromiseMay 144 months agoSupply chainUnknown
OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposMay 144 months agoSupply chainUnverifiedUnknown
WoflowShinyHunters leaked 2TB of files from AI merchant data platformMay 74 months agoExtortionUnverified448Kacct
BraintrustAI evaluation startup's AWS account breach exposed stored customer AI API keysMay 44 months agoHackingUnknown
Context AIAI startup Context AI's Office Suite app breach leaks users' OAuth tokensApr 205 months agoHackingUnverifiedUnknown
LovableAuthorization flaw exposed chat histories of public Lovable projectsApr 205 months agoExposed dataUnverifiedUnknown
My Lovely AIAI girlfriend platform breach exposed prompts and generated image linksApr 85 months agoHackingUnverified106Kacct
Cuties AINSFW AI companion platform data including prompts posted to hacking forumMar 315 months agoHackingUnverified144Kacct
AnthropicClaude Code source code accidentally published in npm packageMar 315 months agoExposed dataUnverifiedUnknown
MercorAI training data contractor hit via compromised LiteLLM open source packageMar 315 months agoSupply chainUnverifiedUnknown
LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsMar 246 months agoSupply chainUnverifiedUnknown
Cal AIHacker claims 12GB leak of 3M Cal AI calorie app users' profiles and meal logsMar 96 months agoHackingUnverifiedUnknown
KomikoAIAI comic generator breach linked user prompts to email addressesMar 26 months agoHackingUnverified1.1Macct
AnthropicDeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeFeb 237 months agoAI or modelUnknown
CodewayAndroid AI video app bucket exposed 8.27M media files including 2M private uploadsFeb 197 months agoExposed dataUnverifiedUnknown
OpenClawMore than 135,000 OpenClaw AI agent instances found exposed to the internetFeb 97 months agoExposed dataUnverifiedUnknown
ClawHubOver 230 malicious OpenClaw skills pushed info-stealing malware to AI agent usersFeb 27 months agoSupply chainUnverifiedUnknown
MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsFeb 27 months agoExposed dataUnverifiedUnknown
BonduAI plush toy's open web console exposed 50,000 children's chat logsJan 297 months agoExposed dataUnverifiedUnknown
CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersJan 297 months agoExposed dataUnverifiedUnknown
DreamXAI image generator database exposed over 1M mostly explicit images, some of minorsDec 4, 20259 months agoExposed dataUnverifiedUnknown
OpenAIMixpanel analytics vendor breach exposed limited data on OpenAI API usersNov 26, 202510 months agoVendor breachUnverifiedUnknown
Secret DesiresErotic AI chatbot left nearly 2M user photos and videos in open storageNov 19, 202510 months agoExposed dataUnverifiedUnknown
AnthropicChinese state group manipulated Claude Code to attack about 30 organizationsNov 13, 202510 months agoHackingUnknown
Smithery.aiPath traversal in MCP hosting registry exposed admin token to 3,000+ hosted AI serversOct 22, 202511 months agoExposed dataUnverifiedUnknown
Imagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesOct 9, 202511 months agoExposed dataUnverifiedUnknown
NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsSep 25, 20251 year agoExposed dataUnverifiedUnknown
Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsSep 11, 20251 year agoExposed dataUnverifiedUnknown
xAIxAI sues ex-engineer accused of taking Grok trade secrets to OpenAIAug 29, 20251 year agoInsiderUnverifiedUnknown
AnthropicCybercriminal used Claude Code to steal and extort data from at least 17 organizationsAug 27, 20251 year agoExtortionUnknown
xAIGrok website exposed system prompts for its AI personasAug 18, 20251 year agoAI or modelUnverifiedUnknown
ChatGPTShared ChatGPT conversations indexed by Google and other search enginesJul 31, 20251 year agoAI or modelUnverifiedUnknown
OpenAIShared ChatGPT conversations were indexed by Google and other search enginesJul 31, 20251 year agoExposed dataUnverifiedUnknown
ReplitReplit AI coding agent deleted SaaStr's production database during code freezeJul 21, 20251 year agoAI or modelUnverifiedUnknown
Meta AIMeta AI bug let users view other people's private prompts and outputsJul 15, 20251 year agoAI or modelUnverifiedUnknown
Paradox.aiMcHire AI hiring chatbot admin flaw exposed McDonald's applicant chatsJul 9, 20251 year agoExposed dataUnknown
Scale AIScale AI left confidential AI training docs and contractor data in public Google DocsJun 24, 20251 year agoExposed dataUnverifiedUnknown
ServiceaideUnsecured Serviceaide database exposed 483,126 Catholic Health patientsMay 9, 20251 year agoExposed data483K
xAIxAI employee leaked API key on GitHub giving access to private Grok modelsMay 1, 20251 year agoExposed dataUnverifiedUnknown
GenNomisNudify AI image generator left 93,485 images and prompt logs in open databaseMar 31, 20251 year agoExposed dataUnverifiedUnknown
H2 O.aiMar 27, 20251 year ago734
OmniGPTHacker leaked 34M lines of OmniGPT AI chat logs and 30,000 user contactsFeb 12, 20251 year agoHackingUnverifiedUnknown
DeepSeekUnauthenticated ClickHouse database exposed chat history and API secretsJan 29, 20251 year agoExposed dataUnverifiedUnknown
Character.AIConfiguration change exposed parts of some users' accounts and chats to othersDec 17, 20241 year agoExposed dataUnknown
WotNotAI chatbot builder left 346,381 customer files in public cloud bucketNov 28, 20241 year agoExposed dataUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.