At 2 a.m., the OpenAI security team received an emergency signal from Mixpanel: the third-party service responsible for front-end tracking on platform.openai.com had been hacked. OpenAI immediately cut the network connection - all Mixpanel scripts were taken offline across the site, cutting off all data channels. The official confirmed that their core systems were safe, and ChatGPT and the regular consumer versions were not affected, but some users on the "Developer Platform" side had suffered collateral damage.

image.png

The list of potential stolen information includes account names, linked emails, approximate city-level locations, operating system and browser versions used during access, referral websites, user or organization IDs. OpenAI emphasized that core assets such as chat records, API request contents, call counts, passwords, credentials, API keys, credit card numbers, and government ID numbers had "zero leaks." In other words, hackers only stole the "doorplate," not the "key" or "things inside the house."