Zach Anderson
Nov 27, 2025 06:43
OpenAI discloses a safety incident involving Mixpanel, affecting restricted API person information. No delicate info reminiscent of API keys or fee particulars had been uncovered.
OpenAI has revealed particulars a couple of safety incident involving Mixpanel, a third-party analytics service, which affected a portion of its API customers’ information. The corporate emphasised that no delicate info, reminiscent of API content material, credentials, or fee particulars, was uncovered throughout the breach.
Incident Overview
On November 9, 2025, Mixpanel detected unauthorized entry to its techniques, resulting in the export of a dataset containing restricted customer-identifiable and analytics info. OpenAI was notified of the breach and acquired particulars of the affected dataset on November 25, 2025, in line with OpenAI.
Knowledge Impacted
The uncovered information included person profile info related to OpenAI’s API platform. Particularly, the affected information comprised names, electronic mail addresses, approximate places, working techniques, browsers, and person IDs. Nevertheless, it was confirmed that no chat content material, API requests, utilization information, passwords, API keys, or fee particulars had been compromised.
Response and Mitigation
In response to the incident, OpenAI has eliminated Mixpanel from its manufacturing companies and is working intently with the analytics supplier to know the complete scope of the breach. The corporate is actively notifying impacted organizations, directors, and customers. OpenAI has additionally initiated complete safety evaluations throughout its vendor ecosystem and heightened safety necessities for all companions.
Safety Suggestions
OpenAI advises customers to be cautious of phishing or social engineering assaults, as names and electronic mail addresses had been a part of the compromised information. Customers are inspired to confirm the authenticity of communications claiming to be from OpenAI and to allow multi-factor authentication (MFA) for enhanced account safety.
Dedication to Safety
OpenAI has reiterated its dedication to sustaining excessive safety and privateness requirements. The group is devoted to transparency and can present additional updates if new info arises. The corporate has additionally terminated its use of Mixpanel and continues to watch for any indicators of knowledge misuse.
Picture supply: Shutterstock
