tl;dr
OpenAI is investigating a potential security breach after a hacker claimed to have obtained login credentials for 20 million user accounts and offered them for sale on the dark web. The hacker posted a message in Russian advertising the sale of the access codes, but security researchers have found i...
OpenAI is investigating a potential security breach after a hacker claimed to have obtained login credentials for 20 million user accounts and offered them for sale on the dark web. The hacker posted a message in Russian advertising the sale of the access codes, but security researchers have found invalid email addresses in the supposed sample data, casting doubt on the legitimacy of the breach.
OpenAI has stated that they have not found evidence of a compromise in their systems. The company's massive user base, which relies on its tools for various purposes, raises concerns about the potential exposure of private conversations and sensitive data. As a precaution, users are advised to log out from all connected devices, enable two-factor authentication, consider using virtual card numbers for subscriptions, and remain vigilant against phishing attempts.
An OpenAI spokesperson acknowledged the situation while maintaining that the company's systems appeared secure. The scope of the alleged breach sparked concerns due to OpenAI's massive user base. Millions of users worldwide rely on the company's tools like ChatGPT for business operations, educational purposes, and content generation. A legitimate breach could expose private conversations, commercial projects, and other sensitive data.
Until there’s a final report, some preventive measures are always advisable:
- Go to the “Configurations” tab, log out from all connected devices, and enable two-factor authentication or 2FA. This makes it virtually impossible for a hacker to gain access to the account, even if the login and passwords are compromised.
- If your bank supports it, then create a virtual card number to manage OpenAI subscriptions. This way, it is easier to spot and prevent fraud.
- Always keep an eye on the conversations stored in the chatbot’s memory, and be aware of any phishing attempts. OpenAI does not ask for any personal information, and any payment update is always handled through the official OpenAI.com link.