Analytics vendor breach exposed names and emails of OpenAI API users
An attacker broke into Mixpanel, an analytics provider OpenAI used on its API platform, and exported names, email addresses, approximate locations and browser details of some API users. OpenAI said no chats, API keys or payment data were involved and stopped using Mixpanel.
- Disclosed
- 26 Nov 2025
- Organization
- OpenAI (via Mixpanel)
- Vendor
- OpenAI
- Product
- OpenAI API platform
- Kind of AI
- Model or package
- AI's role
- AI was the target
- How it happened
- Supply chain and access: Third-party leak
- Harm
- Data exposed
- Data involved
- Personal data
- Reach
- One organization
- Severity
- Medium
- Model at fault
- No
- Status
- Confirmed