Observed incident

Mixpanel breach exposed limited OpenAI user analytics

Reported

What happened

OpenAI said a Mixpanel intrusion exposed limited identifying and analytics information for some API users and a limited group of ChatGPT users.

Parties and reporting

AI tools and systems: OpenAI API platform, ChatGPT, Mixpanel

Outcome

OpenAI removed Mixpanel, notified affected users, and expanded vendor reviews. It reported no compromise of chats, API keys, passwords, or payment details.

Operating lesson

Minimize analytics data and include third-party telemetry providers in security reviews and incident response.

Evidence and limits

The breach occurred in Mixpanel's systems, not OpenAI's infrastructure. A December 19 clarification described the limited ChatGPT user impact.

Sources