Skip to content

GitLab

Open
Created by Abbey Durden@abbey28s327904Maintainer

Decrypt's Art, Fashion, And Entertainment Hub


A hacker said they purloined private details from countless OpenAI accounts-but scientists are skeptical, and the company is investigating.

OpenAI says it's investigating after a hacker claimed to have actually swiped login credentials for 20 million of the AI company's user accounts-and put them up for sale on a dark web forum.

The pseudonymous breacher published a puzzling message in Russian marketing "more than 20 million gain access to codes to OpenAI accounts," calling it "a goldmine" and providing prospective purchasers what they claimed was sample data containing email addresses and passwords. As reported by Gbhackers, the full dataset was being sold "for simply a couple of dollars."

"I have more than 20 million gain access to codes for OpenAI accounts," emirking wrote Thursday, according to an equated screenshot. "If you're interested, reach out-this is a goldmine, and Jesus concurs."

If legitimate, this would be the 3rd major security occurrence for townshipmarket.co.za the AI business given that the release of to the public. In 2015, a hacker got access to the business's internal Slack messaging system. According to The New York Times, the hacker "took details about the style of the company's A.I. innovations."

Before that, in 2023 an even simpler bug including jailbreaking prompts enabled hackers to obtain the personal data of OpenAI's paying clients.

This time, however, security scientists aren't even sure a hack happened. Daily Dot press reporter Mikael Thalan composed on X that he found void email addresses in the expected sample information: "No proof (recommends) this alleged OpenAI breach is legitimate. A minimum of two addresses were invalid. The user's only other post on the online forum is for a stealer log. Thread has since been deleted too."

No proof this alleged OpenAI breach is legitimate.

Contacted every email address from the supposed sample of login qualifications.

At least 2 addresses were void. The user's only other post on the online forum is for asteroidsathome.net a stealer log. Thread has actually since been deleted also. https://t.co/yKpmxKQhsP

- Mikael Thalen (@MikaelThalen) February 6, 2025

OpenAI takes it 'seriously'

In a statement shown Decrypt, an OpenAI representative acknowledged the scenario while maintaining that the company's systems appeared safe and secure.

"We take these claims seriously," the spokesperson said, including: "We have not seen any proof that this is connected to a compromise of OpenAI systems to date."

The scope of the alleged breach triggered concerns due to OpenAI's massive user base. Countless users worldwide count on the business's tools like ChatGPT for business operations, academic functions, and content generation. A legitimate breach might expose private conversations, industrial tasks, and other sensitive data.

Until there's a final report, some preventive measures are always advisable:

- Go to the "Configurations" tab, log out from all linked devices, and allow two-factor authentication or 2FA. This makes it essentially difficult for a hacker to gain access to the account, even if the login and passwords are jeopardized.