OpenAI has confirmed the leak of some of its API platform’s customer data

OpenAI is the latest company whose data has been leaked and some of its customers’ information may have been compromised. Of course, if you are using ChatGPT personally, your information is probably not stolen and there is no need to worry about it.

In a blog post and in emails to customers, the company explained that there was an incident involving a data analytics provider called Mixpanel, where an attacker may have stolen some customer information. This only affects people who have accounts to access the company’s APIs.

The information of users who use ChatGPT personally has not been stolen

Also, for those who have an account on the API platform, information such as name, email address, approximate location, operating system and browser used to access the website may have been stolen.

This information also includes data about referring websites and organization or user IDs associated with the API account. OpenAI claims no other information was stolen.

Mixpanel first became aware of an attacker accessing its systems on November 9, 2025, and shared a dataset with OpenAI on November 25. OpenAI began notifying customers the next day.

The company says that those with API accounts should now be even more careful with their information, as they may be exposed to phishing messages. OpenAI advises users to be wary of suspicious emails and emphasizes that the company will never ask for your password, API keys or other verification codes via email or chat.

“Trust, security and privacy are the foundations of our products, organization and mission,” says OpenAI. We are committed to transparency and will inform all customers and users affected by this incident.”