OpenAI Data Breach Confirmed, But It's Unlikely To Impact You

OpenAI Data Breach Confirmed, But It’s Unlikely to Impact You

Last updated: 2025/11/27 at 5:16 PM

News Room Published 27 November 2025

OpenAI is the latest company to be involved in a data breach where customer information may have been compromised. If you use ChatGPT for personal use, it’s unlikely your information has been stolen.

In emails to customers and a blog post on its website, OpenAI explains that an incident with a data analytics provider called Mixpanel saw the potential of some customer data being stolen by an attacker. It only impacts those who have accounts to access the brand’s API interfaces.

Those with accounts for the API platform may have had details stolen, including their name, email address, approximate location, operating system, and the browser they use to access the website.

It also included information for “referring websites” and “organization or User IDs associated with the API account.” OpenAI says there was no other information was taken.

Mixpanel first learned of the attacker gaining access to its systems on Nov. 9, 2025, and shared a dataset with OpenAI on Nov. 25. OpenAI then began telling customers a day later.

The brand says those with API accounts should be even more cautious with their information moving forward as it may mean they’re prone to receiving phishing messages. It says to look out for rogue emails, and reaffirms that OpenAI won’t ever ask for your password, API keys or other verification codes on email or chat.

OpenAI says, “Trust, security, and privacy are foundational to our products, our organization, and our mission. We are committed to transparency, and are notifying all impacted customers and users.”

Recommended by Our Editors

The brand said it has stopped working with Mixpanel in its services. It says it will also be “conducting additional and expanded security reviews across our vendor ecosystem and are elevating security requirements for all partners and vendors.”

If you were impacted by this incident, be sure to read PCMag’s guide on what to do after a data breach.

Disclosure: Ziff Davis, PCMag’s parent company, filed a lawsuit against OpenAI in April 2025, alleging it infringed Ziff Davis copyrights in training and operating its AI systems.