Mar 24, 2023Confirmed
ChatGPT bug showed users other people's chat titles and Plus subscribers' names, emails and partial card data
Rogue: Went past its access, Caused harmAI loose in the worldData exfiltrationDERIVED
Approved by person, Oct 11, 2026. How entries are approved
On March 20, 2023, a bug in the redis-py client caused ChatGPT to serve some users other active users' chat history titles and, during a nine-hour window, exposed about 1.2% of active ChatGPT Plus subscribers' first and last names, email addresses, payment addresses, card type, last four digits and expiry dates. OpenAI took ChatGPT offline, disclosed the incident four days later, and said full card numbers were not exposed.
What this means for youAnything you type into a hosted AI tool can leak to strangers through an ordinary software bug, so keep client data, passwords and payment details out of chat prompts.
Sources
- OpenAIhttps://openai.com/index/march-20-chatgpt-outage/
rogue:R3rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2223. It has not been edited since it was approved; the hash above would not match if it had. How to verify