OpenAI API user profile data exposed in a breach at analytics vendor Mixpanel
An attacker got into part of Mixpanel's systems and exported a dataset that included profile data on users of OpenAI's API platform and some ChatGPT users who filed help tickets. Fields included name, email, coarse location, OS and browser, referring sites and account IDs. OpenAI says no chats, API data, keys, passwords or payment details were involved. It removed Mixpanel from production and ended its use of the vendor.
Sources
- Primary: https://openai.com/index/mixpanel-incident/
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesA data breach sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.