// tag

OpenAI

Security incidents tagged OpenAI. Newest first.

## 2 OpenAI incidents in the last 12 months

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

show 2 older incidents

May 1highOpenAI employee devices hit via TanStack Mini Shai-Hulud wavepatched
› TanStack-related npm packages / OpenAI employee endpoints patched
In May 2026 OpenAI confirmed two employee devices were breached as part of the broader TanStack Mini Shai-Hulud npm supply-chain campaign. OpenAI said customer data, production systems, IP and deployed software were not impacted.
open incident →

Nov 8mediumMixpanel smishing breach exposes OpenAI API users' names and emailsno fix needed
› Mixpanel (analytics vendor); OpenAI API platform users no fix needed
Mixpanel detected a smishing campaign on November 8, 2025 that led to an export of some customers' analytics data. OpenAI said limited API-platform user data was exposed (names, emails, coarse location, browser/OS, org and user IDs), but no chats, prompts, API keys, passwords or payment data. OpenAI removed Mixpanel from production.
open incident →