On November 26 (local time), OpenAI released a statement concerning a security incident tied to the website analytics service Mixpanel. On November 9, Mixpanel detected that an unauthorized attacker had infiltrated some of its systems and exported a dataset. This dataset contained limited amounts of customer-identifiable information as well as analytics data. It's important to note that this incident solely pertained to a restricted set of analytics data for a portion of API users. Products like ChatGPT remained unaffected, and there was no breach of OpenAI's own systems, ensuring that no chat records or similar information were leaked. OpenAI has promptly removed Mixpanel from its production environment and is now in the process of thoroughly reviewing the datasets that were impacted. Currently, OpenAI is collaborating closely with Mixpanel and other relevant parties to gain a comprehensive understanding of the incident's specifics. As of now, no evidence has been found to suggest that systems or data outside the Mixpanel environment were compromised.
