OpenAI, Inc. and Mixpanel, Inc
OpenAI, Mixpanel Sued Over November 2025 Data Breach
A proposed nationwide class action claims OpenAI and Mixpanel failed to stop a November 2025 breach of Mixpanel's systems that exposed users' personal information. The suit seeks damages and other relief for affected individuals.
Key facts
- Claim deadline
- No deadline listed
- Potential payment
- Payment varies
- Proof listed
- No proof requirement listed
- Status
- Upcoming
Plain-language overview
Who may qualify?
Eligibility depends on the dates, products, locations, and other terms listed for this claim. Review any criteria below and the official terms before deciding whether it may apply to you.
- You had an OpenAI API account on platform.openai.com whose user profile/analytics data was processed by Mixpanel during the period leading up to and including the November 9, 2025 security incident.
- OR you were a ChatGPT user who submitted a help‑center ticket or was logged into platform.openai.com during the time Mixpanel logged data later exported in the incident.
- Your PII (such as name, email address, approximate location, operating system, browser, referring websites, and organization or user IDs) was allegedly accessed and/or acquired by an unauthorized party in that incident.
Case overview
What this settlement is about
A new lawsuit filed by plaintiff Jon Woodard accuses OpenAI and Mixpanel of failing to prevent a November 2025 data breach in Mixpanel's systems that allegedly exposed personally identifiable information tied to OpenAI's API platform and certain ChatGPT help-center users. The exposed data reportedly included names, email addresses, approximate locations, operating systems and browsers, referring websites, and organization or user IDs. The complaint raises claims of negligence, breach of implied contract, and unjust enrichment, and seeks declaratory and injunctive relief along with damages on behalf of a proposed nationwide class of people whose personal information was allegedly accessed or acquired by an unauthorized party in the breach. No settlement has been reached; the case is an active lawsuit seeking to establish liability and remedies.
