Mixpanel smishing breach exposes OpenAI API users' names and emails
Teaser from the source
Mixpanel detected a smishing campaign on November 8, 2025 that led to an export of some customers' analytics data. OpenAI said limited API-platform user data was exposed (names, emails, coarse location, browser/OS, org and user IDs), but no chats, prompts, API keys, passwords or payment data. OpenAI removed Mixpanel from production.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on OpenAI
Other advisories
- Not ratedosv:openSUSE-SU-2026:12144-1openai-codex-0.162.1-2.1 on GA media
- Not ratedosv:CVE-2026-108603slide-maker through 5.8.0 Path Traversal via generate_images_openai.py
- CriticalCVE-2026-51882Der OpenAI-kompatible Datei-Upload-Endpunkt `/v1/files` in Langchain-Chatchat `0.
- Not ratedosv:openSUSE-SU-2026:11923-1openai-codex-0.158.0-1.1 on GA media
- Not ratedosv:CLEANSTART-2026-XQ90781LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
- Not ratedosv:openSUSE-SU-2026:11849-1openai-codex-0.155.1-1.1 on GA media
- HighCVE-2026-94626Die Validierung des `tp_size`-Parameters in `kv_transfer_params` auf OpenAI-kompatiblen Abschluss-Endpunkten in vLLM bis Version 0.
- Not ratedosv:openSUSE-SU-2026:21870-1Security update for openai-codex
Other news entries
- Anthropic and OpenAI diverge on who should pull the plug on risky AINewsCSO Online
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Shadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesNewsDark Reading
- Attacker Relentlessly Scans for Credentials by Impersonating AI BotsNewsDark Reading
- Fake ChatGPT, Claude apps spread malware via signed AI binariesNewsCSO Online
- 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAIBreachpwn.watch
- OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in testsNewsBleepingComputer
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsNewsThe Hacker News
Source: https://pwn.watch/i/mixpanel-smishing-breach-openai-api-users-2025
ID