Skip to content
Sign in Subscribe
Security / breaches / Analytics / supply chain risk

OpenAI customer data leaked in third-party, metadata-only smish

Is any supply chain safe? The world's most valuable privately-held company's experience with Mixpanel suggests no.

Phillip de Wet
By  Phillip de Wet
Updated / Published 2 min read
OpenAI customer data leaked in third-party, metadata-only smish
Image credit: https://unsplash.com/@envoi

OpenAI – now the most valuable privately-held company in the world – had to inform its API customers their meta-data was exposed in a breach at a peripheral third-party supplier.

The AI company disclosed the "security incident" late on Wednesday, November 26, sending out email notifications to affected users of its API platform.

The breach was by way of a smish attack at Mixpanel. The third-party data analytics provider for OpenAI's API platform disclosed the attack vector but very few further details.

This content is for members only

Subscribe
Add The Stack on Google
  • Phillip de Wet

    Phillip de Wet

    Phillip de Wet started in journalism as an honest B2B IT-sector reporter before straying into business, politics, and international affairs. He is currently in recovery, studying AI while writing about everything from hardware to infosec policy.

More in Security