OpenAI data may have been exposed after a cyberattack on analytics firm Mixpanel

OpenAI has warned users that their data may have been exposed due to a cyberattack on Mixpanel, an analytics firm. The attack, identified as a smishing campaign on November 8, 2025, led to the theft of a limited dataset containing user profile details from OpenAI's platform, including names, emails, and locations. OpenAI confirmed that its systems were not breached and that sensitive data like passwords and payment information remain secure.

In response, OpenAI removed Mixpanel from its services and is notifying affected users. Mixpanel has taken steps to secure its systems, including account resets and engaging cybersecurity partners.