A threat actor has allegedly obtained the login information for 20 million OpenAI accounts, including passwords and email addresses.

According to the GBHackers report, This claim was made on an underground forum, where the actor provided a sample of the data and offered the full batch for sale at a nominal price.

The authenticity of these claims remains unverified, but the situation has raised significant concerns about data security in the AI industry.

The Alleged Breach

The post by the threat actor reads:”When I realized that OpenAI might have to verify accounts in bulk, I understood that my password wouldn’t stay hidden. I have more than 20 million access codes to OpenAI accounts. If you want, you can contact me – this is a treasure, and Jesus thinks so too.”

Threat actor’s claims on an underground forum (Source : HackManac)

This breach could have significant consequences if it turns out to be true:

Unauthorized Access: Compromised accounts could be used to access sensitive user data or exploit OpenAI’s API for malicious purposes.
Phishing and Fraud: Cybercriminals could use the stolen credentials to craft convincing phishing campaigns or commit financial fraud.
Reputational Damage: Such an incident could erode trust in OpenAI’s ability to safeguard user information.

HackManac shared the claims presented by threat actor in a post on the hacker forum.

This incident comes amid increasing cyber threats targeting AI platforms. In July 2023, researchers identified over 200,000 OpenAI credentials being sold on the dark web as part of stealer logs.

Similarly, Microsoft recently investigated unauthorized data extraction from OpenAI’s API by a group linked to Chinese AI startup DeepSeek.

These incidents highlight the growing interest of cybercriminals in exploiting AI technologies for malicious purposes.

As generative AI tools like ChatGPT become increasingly integrated into daily life, they also become lucrative targets for cybercriminals.

Neither OpenAI nor independent cybersecurity firms have confirmed the legitimacy of the threat actor’s claims.

Investigations are likely underway to determine whether OpenAI’s systems were compromised or if the credentials were obtained through other means, such as phishing or malware attacks.

PCI DSS 4.0 & Supply Chain Attack Prevention – Free Webinar

The post OpenAI Data Breach: Threat Actor Allegedly Claims 20 Million Logins for Sale appeared first on Cyber Security News.