OpenAI claims that ChatGPT users were unaffected, with chat content, API usage, passwords, payment details, and government IDs remaining safe.

If they weren't so brain rotted from AI, they'd realize that those things aren't retained for shits and giggles in the first place...

Everything you ever say to a chatbot is archived and associated with your profile. And the chatbot company owns it and can do whatever they want with it.

confirm[ing] that a ton of user data has been exposed owing to a breach in a third-party web analytics tool called Mixpanel.

Important detail to know before commenting: it was Mixpanel analytics apparently that was breached and not ChatGPT itself.

Another reason to have Firefox strict privacy mode turned on along with uBlock and Disconnect though :)

"WE didn't get hacked, we only gave all the data of our customers to a third party and THEY got hacked!"

If only they had asked ChatGPT to make them a foolproof security system. Human error, obviously

This is the hackers fault for violating the OpenAI TOS.

⢀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⠀⣠⣤⣶⣶ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⢰⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣧⣀⣀⣾⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⡏⠉⠛⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⣿ ⣿⣿⣿⣿⣿⣿⠀⠀⠀⠈⠛⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠛⠉⠁⠀⣿ ⣿⣿⣿⣿⣿⣿⣧⡀⠀⠀⠀⠀⠙⠿⠿⠿⠻⠿⠿⠟⠿⠛⠉⠀⠀⠀⠀⠀⣸⣿ ⣿⣿⣿⣿⣿⣿⣿⣷⣄⠀⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⠏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠠⣴⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⡟⠀⠀⢰⣹⡆⠀⠀⠀⠀⠀⠀⣭⣷⠀⠀⠀⠸⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⠃⠀⠀⠈⠉⠀⠀⠤⠄⠀⠀⠀⠉⠁⠀⠀⠀⠀⢿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⢾⣿⣷⠀⠀⠀⠀⡠⠤⢄⠀⠀⠀⠠⣿⣿⣷⠀⢸⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⡀⠉⠀⠀⠀⠀⠀⢄⠀⢀⠀⠀⠀⠀⠉⠉⠁⠀⠀⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣧⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢹⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣿⣿

Clanker wankers will say they have nothing to hide anyway.

I guess all their cybersecurity measures were implemented by ChatGPT…

IMO the problem with companies doing “fast” technology (i.e. AI) do so by pushing security aside to get things through the pipeline and into production as quickly as possible. Security has always been a “blocker” to development teams because it slows them down with all the, you know, requirements to make a product/application secure. Unless you have security-minded leads or a security representative in the C-suite (i.e. CISO) who has significant influence, half-baked and insecure products will continuously be pushed out.

I honest to fucking God don't understand how cybersec is so fucking bad that there are so many damn data breaches that I lost count

Really? It's hard to understand?

Dude it's a fucking arms race between cyber security teams and attackers.

And there's more money in attacking than there is in defending. Defending is an expense. Attacking is almost entirely profit

And some attackers are backed by nation-states.

Attackers only have to get through once. Defense has to work 100% of the time.

OpenAI claims that ChatGPT users were unaffected, with chat content, API usage, passwords, payment details, and government IDs remaining safe.

Ah yes, OpenAI, the trustworthy company run by trustworthy folks. I'm sure they just need $300 bn to re-safeguard your personal data.

Lol.

I'm so sorry, I should care...

In my defence: nah.

The worst part to me is that so many companies use third parties to process parts of things that it's like you give data to one company and they give your data to like 10 other companies and before you know it your information has been breached multiple times over from the same starting point.

Is it really so hard to self host the analytics with an open source analytics solution? I don't know why people at any scale of more than 15 devs would want that kind of security risk.

I just realized I never deleted the account I created a couple years ago to try it, before knowing all the harms of ai, and realizing it wasn't worth it. They claim that chatgpt users weren't affected, but we can never trust them. Well, at least I remembered to delete my account now.

OpenAI claims that ChatGPT users were unaffected, with chat content, API usage, passwords, payment details, and government IDs remaining safe. However, users of OpenAI's API interfaces at platform.openai.com have seen a variety of data exposed in this latest breach.

Never used AI online, never will. I played with a locally installed, air-gapped, Deepseek just to see what it was like, because I don't trust it at all. Meh.

I don't get the hype.

Y'all have fun with that, I'm going to avoid it as much as I can.

😂

And nothing of value was lost... Fucking morons, every single one if them...

Good Security and record Profits are antithetical Ideals.

Never use emails addresses tied to secure services such as banking or shopping or gov services for any other purpose.

Create email addresses through various services for various purposes.

Banking, google services like YouTube, social media, personal - friends and family, and of course an account for porn.

Don't use your real name or any actually useful when creating an email addreas

Use email relays or anon email that creates random addresses and forwards to your email.

Use proton mail and have up to 10 alias accounts at a time.

Use temp email addresses.

Compartmentalize your online accounts and data to minimize exposure and damages.

They're so worried about getting into AI they don't care about the environmental impact, the economic impact, security, or whether it even works.

It’s almost like if you take even a minor bit of opsec you can get away with anything.

Most of those cyber criminals sit outside of western jurisdiction. That's why they are "safe" from arrests. Good luck enforcing an arrest warrant in Russia, India, China or North Korea.

I should start a company that instructs companies on how to avoid all these data breaches: stop giving 3rd party access to your customers data.

Nice! Would be nice if at least few idiots would stop using this planet destroying shit.

Inside job most likely went down like: "oh noes mr data broker, I have to step away for a minute, so by all means do not forget to take all that money you've set on my desk next to all that data I've left unsecured and unattended!" - OpenAI is founded as a company based on stolen IP. Altman belongs in prison.

I have always assumed that everything that I type into an LLM is guaranteed to be completely insecure, and entirely public. I would never, in a million years, put anything sensitive into an LLM, any account and password is unique.

I mean, I figure whatever I type is going to be used as training data for the next iteration, and I assume anything that goes in, is retrievable to some degree.

Here's what OpenAI claims has been exposed:

* Names provided to accounts on platform.openai.com
* Email addresses linked to the API accounts via platform.openai.com
* "Coarse approximate location" determined by IP address and web browser
* OS and browser type, as well as referring websites
* Organizataions and user IDs saved into the API accounts

These fuckwits

users were unaffected, with chat content, API usage, passwords, payment details, and government IDs remaining safe.

who needs a government ID to use chatgpt?

Honestly good, fuck em. AI is already a threat to privacy so the users get to feel some immediate consequences of it!