Dubai – November 27, 2025

OpenAI announced in an official statement distributed via email to its users that the data analytics provider Mixpanel experienced a security incident that led to the leakage of a limited amount of analytics data associated with API accounts, while confirming that the incident does not relate to any breach of OpenAI's own systems.

The company stated that the records potentially included in the leak are limited to simple identifiable information, such as name, email, approximate location based on browser, operating system and browser used, as well as user or organization identifiers. OpenAI firmly confirmed that API keys, passwords, payment information, chat logs, and usage data were not affected at all.

OpenAI explained that Mixpanel discovered on November 9, 2025, unauthorized access to part of its systems, allowing the export of a dataset concerning the company’s clients. On November 25, Mixpanel shared the affected data with OpenAI, which subsequently initiated a comprehensive security review.

The company confirmed that it has completely terminated the use of Mixpanel in production services and is currently working to inform all directly affected organizations and users, noting that there are currently no indications of data misuse or the breach extending to any other system outside of Mixpanel.

OpenAI also emphasized that the information that may have been leaked could be exploited in phishing attempts or social engineering, urging users to be cautious of any suspicious messages or links from unverified sources, while reminding that the company does not request passwords, API keys, or verification codes via email or messages.

The company stated it has initiated extensive security reviews for all service providers within its network and will raise security requirements for all partners and vendors to ensure the highest safety standards and user protection.

OpenAI concluded its statement by reaffirming its full commitment to security, privacy, and transparency, urging any user with inquiries to contact via the designated email:

mixpanelincident@openai.com