gcdRadar
archive/Breaches & attacks/AIR-2023-0030
closedclosed 3 Apr 2023Breaches & attacks4 Confirmed real-world lossAI

ChatGPT Bug Exposes User Chat Histories and Payment Data

ChatGPT

A software bug in ChatGPT caused the exposure of user chat history titles and private payment information to other users. The incident prompted OpenAI to temporarily shut down the service while investigating the issue.

first report
20 Mar 2023
last update
20 Mar 2023

Timeline · 1

  1. 20 Mar 2023ChatGPT Reportedly Exposed Users' Private Data Reportedly Due to Bug

Sources · 1

Research and catalogues

  1. 2023-03-20
    ChatGPT Reportedly Exposed Users' Private Data Reportedly Due to Bug
    AI Incident Database · incidentdatabase.ai/cite/516

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Breaches & attacks
AI role
Attack on AI
categories
Data leak
severity
4 · Confirmed real-world loss
targets
OpenAI
owasp llm top 10
LLM02:2025 Sensitive Information Disclosure
mitre atlas
no technique for these categories
tags
data-leakbugprivacy
dates
happened 20 Mar 2023 · first reported 20 Mar 2023
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# ChatGPT Bug Exposes User Chat Histories and Payment Data

https://gcdradar.vercel.app/incidents/chatgpt-bug-exposes-user-chat-histories-and-payment-data · AIR-2023-0030 · closed 2023-04-03

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss)
- Fix status: No fix needed
- First reported: 2023-03-20
- AI role: Attack on AI
- Products: ChatGPT

## Summary

A software bug in ChatGPT caused the exposure of user chat history titles and private payment information to other users. The incident prompted OpenAI to temporarily shut down the service while investigating the issue.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2023-03-20: ChatGPT Reportedly Exposed Users' Private Data Reportedly Due to Bug (https://incidentdatabase.ai/cite/516)

## Sources

- 2023-03-20 AI Incident Database: ChatGPT Reportedly Exposed Users' Private Data Reportedly Due to Bug https://incidentdatabase.ai/cite/516

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    ChatGPT Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion

    Breaches & attacks · Real loss · since 11 Mar 2023

    AI
  2. closed
    ChatGPT ChatGPT Account Compromise Leads to Exposure of Private Chat Logs

    Breaches & attacks · Exploited · since 30 Jan 2024

    AI
  3. closed
    ChatGPT ChatGPT Conversation Exfiltration via Indirect Prompt Injection

    Research · since May 2023 (approx.)

    AI
  4. closed
    ChatGPT LLM Application Frameworks Allow Remote Code Execution via Prompting

    Research · since 26 Mar 2023 · updated 31 Mar 2023

    AI
  5. closed
    Bing Chat Bing Chat Initial Instructions Exposed via Prompt Injection by Testers

    Research · since 8 Feb 2023

    AI
  6. closed
    ChatGPT Mac App OpenAI ChatGPT macOS App Stored User Conversations in Plain Text

    Patch now · Disclosed · since 1 Jul 2024

    AI