https://pwn.watch/t/smishing Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 27 Nov 2025 00:00:00 GMT https://pwn.watch/i/mixpanel-smishing-breach-openai-api-users-2025 https://pwn.watch/i/mixpanel-smishing-breach-openai-api-users-2025 Thu, 27 Nov 2025 00:00:00 GMT medium <p>Mixpanel detected a smishing campaign on November 8, 2025 that led to an export of some customers' analytics data. OpenAI said limited API-platform user data was exposed (names, emails, coarse location, browser/OS, org and user IDs), but no chats, prompts, API keys, passwords or payment data. OpenAI removed Mixpanel from production.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2025-11-26: OpenAI discloses impact on API users and drops Mixpanel (<a href="https://openai.com/index/mixpanel-incident/">source</a>)</li><li>2025-11-08: Mixpanel detects the smishing campaign and unauthorized export (<a href="https://openai.com/index/mixpanel-incident/">source</a>)</li></ul>