Mixpanel security incident: what OpenAI users need to know

December 19, 2025 clarification: We are updating the blog to clarify the description of impacted users. The original blog stated that “API users” were impacted. It has been updated to add: “It also affected a limited number of ChatGPT users who submitted help center tickets or were logged into platform.openai.com⁠(opens in a new window).” All impacted users were identified and notified at the same time as part of the original outreach to users. Aside from this clarification, nothing else about our understanding of the incident, including the type of information involved, has changed. 

Transparency is important to us, so we want to inform you about a recent security incident at Mixpanel, a data analytics provider OpenAI used for web analytics on the frontend interface for our API product (platform.openai.com⁠(opens in a new window)). 

The incident occurred within Mixpanel’s systems and involved limited analytics data related to some users of the API. It also affected a limited number of ChatGPT users who submitted help center tickets or were logged into platform.openai.com.

This was not a breach of OpenAI’s systems. No chat, API requests, API usage data, passwords, credentials, API keys, payment details, or government IDs were compromised or exposed.

What happened

On November 9, 2025, Mixpanel became aware of an attacker that gained unauthorized access to part of their systems and exported a dataset containing limited customer identifiable information and analytics information. Mixpanel notified OpenAI that they were investigating, and on November 25, 2025, they shared the affected dataset with us. 

What this means for impacted users

User profile information associated with the use of platform.openai.com⁠(opens in a new window) may have been included in data exported from Mixpanel. The information that may have been affected was limited to:

Our response  

What you should keep in mind  

OpenAI

FAQ

Why did OpenAI use Mixpanel?

Was this caused by a vulnerability in OpenAI’s systems?

• Yes.