OpenAI admits data breach after analytics partner hit by phishing attack

"We are in the process of notifying impacted organizations, admins, and users directly. While we have found no evidence of any effect on systems or data outside Mixpanel's environment, we continue to monitor closely for any signs of misuse,"

"This was not a breach of OpenAI's systems. No chat, API requests, API usage data, passwords, credentials, API keys, payment details, or government IDs were compromised or exposed."

"How should customers react? There are three levels of concern here: which OpenAI API customers are affected, how attackers might use stolen data if they are, and the possibility, however hypothetical, that more valuable data such as API keys or account credentials could be at risk."

Impacted organizations, admins, and users are being notified directly. Investigations found no evidence of effects on systems or data outside Mixpanel's environment, and monitoring continues for any signs of misuse. There was no breach of OpenAI's systems. No chat logs, API requests, API usage data, passwords, credentials, API keys, payment information, or government IDs were compromised or exposed. Customers face three levels of concern: which OpenAI API customers used Mixpanel and may be affected; how attackers could exploit any stolen Mixpanel data; and the hypothetical possibility that more sensitive items like API keys or account credentials could be exposed.

Read at InfoWorld