OpenAI Investigates Claims of Massive Data Breach Affecting 20 Million Accounts
Reports have emerged of a potential data breach involving OpenAI, with claims that a hacker has obtained login credentials for 20 million user accounts.
The alleged breach, first spotted on a hacking forum, includes email addresses and passwords.
While OpenAI has acknowledged the reports, the company has stated that there is no evidence to suggest its systems have been compromised.
Hacker Claims to Possess Stolen Data
The unidentified threat actor responsible for the claims has reportedly provided a sample of the alleged stolen data and is attempting to sell the full dataset.
However, OpenAI has not confirmed the authenticity of these claims.
In a company’s statement, OpenAI stated,
“We take these claims seriously. We have not seen any evidence that this is connected to a compromise of OpenAI systems to date.”
Cybersecurity Expert Warns of Potential Risks
Cybersecurity expert Jamie Akhtar, CEO and co-founder of CyberSmart, has urged OpenAI users to take precautions while the situation is being investigated.
He said,
“If verified, this breach could have huge ramifications, both for OpenAI and its customers. Millions of people and businesses have embraced the company’s technology into their daily lives, so the potential damage to OpenAI’s reputation for data security could be huge.”
Jamie Akhtar, CEO and co-founder of CyberSmart
Possible Consequences of a Data Leak
Although OpenAI has yet to confirm the legitimacy of the hacker’s claims, experts warn of the possible fallout if the breach turns out to be real.
Stolen credentials could be exploited to gain access to sensitive user information, manipulate OpenAI’s APIs, or even distribute malware.
Akhtar added,
“There’s also the possibility of cybercriminals using stolen user credentials to produce targeted phishing campaigns, steal identities, or commit financial fraud.”
Users Advised to Strengthen Security
In response to the reports, security professionals recommend users update their passwords and enable multi-factor authentication as an added layer of protection.
Akhtar advised,
“Although this breach is yet to be verified by OpenAI, anyone using the tool should update their passwords and credentials, as a precaution. And, if you haven’t already, switch on multi-factor authentication within OpenAI’s settings, as this should give you another layer of protection even if your password has been compromised.”
Users are advised to stay alert and take proactive steps to protect their accounts while the situation is being looked into.