Incident 657: ChatGPT Account Compromise Leads to Unintended Data Exposure

Responded
Description: A security breach involving ChatGPT led to the exposure of sensitive conversations, including login credentials and personal data, after a user account was compromised. OpenAI responded to the incident with an explanation.

Tools

New ReportNew ReportNew ResponseNew ResponseDiscoverDiscoverView HistoryView History
Alleged: OpenAI developed and deployed an AI system, which harmed ChatGPT users and Chase Whiteside.

Incident Stats

Incident ID
657
Report Count
1
Incident Date
2024-01-30
Editors
Daniel Atherton
OpenAI says mysterious chat histories resulted from account takeover
arstechnica.com · 2024
Dan Goodin post-incident response

OpenAI officials say that the ChatGPT histories a user reported result from his ChatGPT account being compromised. The unauthorized logins came from Sri Lanka, an Open AI representative said. The user said he logs into his account from Broo…

Variants

A "variant" is an incident that shares the same causative factors, produces similar harms, and involves the same intelligent systems as a known AI incident. Rather than index variants as entirely separate incidents, we list variations of incidents under the first similar incident submitted to the database. Unlike other submission types to the incident database, variants are not required to have reporting in evidence external to the Incident Database. Learn more from the research paper.