Nov 8, 2025
1 new incident, 0 with updates.
Started
- ClosedMediumNo fix needed
Mixpanel smishing breach exposes OpenAI API users' names and emails
Mixpanel detected a smishing campaign on November 8, 2025 that led to an export of some customers' analytics data. OpenAI said limited API-platform user data was exposed (names, emails, coarse location, browser/OS, org and user IDs), but no chats, prompts, API keys, passwords or payment data. OpenAI removed Mixpanel from production.
Mixpanel (analytics vendor); OpenAI API platform usersClosed Nov 27, 2025
