Zach Anderson
Nov 27, 2025 06:43
OpenAI discloses a security incident involving Mixpanel, affecting limited API user data. No sensitive information such as API keys or payment details were exposed.
OpenAI has revealed details about a security incident involving Mixpanel, a third-party analytics service, which affected a portion of its API users’ data. The company emphasized that no sensitive information, such as API content, credentials, or payment details, was exposed during the breach.
Incident Overview
On November 9, 2025, Mixpanel detected unauthorized access to its systems, leading to the export of a dataset containing limited customer-identifiable and analytics information. OpenAI was notified of the breach and received details of the affected dataset on November 25, 2025, according to OpenAI.
Data Impacted
The exposed data included user profile information associated with OpenAI’s API platform. Specifically, the affected data comprised names, email addresses, approximate locations, operating systems, browsers, and user IDs. However, it was confirmed that no chat content, API requests, usage data, passwords, API keys, or payment details were compromised.
Response and Mitigation
In response to the incident, OpenAI has removed Mixpanel from its production services and is working closely with the analytics provider to understand the full scope of the breach. The company is actively notifying impacted organizations, administrators, and users. OpenAI has also initiated comprehensive security reviews across its vendor ecosystem and heightened security requirements for all partners.
Security Recommendations
OpenAI advises users to be cautious of phishing or social engineering attacks, as names and email addresses were part of the compromised data. Users are encouraged to verify the authenticity of communications claiming to be from OpenAI and to enable multi-factor authentication (MFA) for enhanced account security.
Commitment to Security
OpenAI has reiterated its commitment to maintaining high security and privacy standards. The organization is dedicated to transparency and will provide further updates if new information arises. The company has also terminated its use of Mixpanel and continues to monitor for any signs of data misuse.
Image source: Shutterstock
