OpenAI Notifies Users of Mixpanel Security Incident

On November 26, 2025, OpenAI disclosed a security incident involving Mixpanel, a third-party analytics provider, where limited analytics data from OpenAI's API platform was accessed due to a breach in Mixpanel's systems. The breach, detected on November 9, did not compromise OpenAI's own systems or sensitive information like API keys or passwords. Affected users were notified via email, detailing the accessed data, which included names, email addresses, and browser information, but not credentials.

OpenAI has removed Mixpanel from its systems and is tightening security standards for third-party vendors. Users are advised to be cautious of phishing attempts and to enable Multi-Factor Authentication (MFA) for added security.