What to know about a recent Mixpanel security incident

OpenAI said a Mixpanel security incident exposed limited analytics data for some API users and a small number of ChatGPT users.

Mixpanel detected unauthorized access on Nov. 9, 2025 and later shared an exported dataset with OpenAI on Nov. 25.

The exposed data may have included names, emails, rough location, browser and OS details, referrers, and organization or user IDs.

OpenAI said no OpenAI systems, passwords, API keys, chat content, or payment details were compromised.

The company removed Mixpanel and is tightening vendor security reviews as it notifies affected users.