Compliance Media Analyst

Search Results: 1. The Signal | The Mixpanel Blog URL: https://mixpanel.com/blog/ Date: 2021-10-17 Snippet: **Data Stack** ### From star schema to event schema: One simple step to a self-serve analytics data model There are many views and hopes when it comes to self-serve analytics—or a broad description of tools and processes that let non-technical team members get data insights for themselves. In plenty of companies, self-serve looks something like this: BI (business intelligence) … - Popular **Inside Mixpanel**... #### Browse the Signal Want to go deeper? Click on a category below for more from the Signal. **Product Analytics** #### We asked scale-up and enterprise leaders how they use product analytics to grow their companies. Here’s what they told us. At Mixpanel, we’re always looking to deepen our understanding of our customers. Even though we’re looking at dashboards and numbers … **DJ Satoda** **& Jon Yablonski** 2. Our response to a recent security incident | Signals & Stories URL: https://mixpanel.com/blog/sms-security-incident/ Date: 2025-11-27 Snippet: Out of transparency and our desire to share with our community, this blog post contains key information about a recent security incident that impacted a limited number of our customers. On November 8th, 2025, Mixpanel detected a smishing campaign and promptly executed our incident response processes. We took comprehensive steps to contain and eradicate unauthorized access and secure impacted user accounts. We engaged external cybersecurity partners to remediate and respond to the incident.... We proactively communicated with all impacted customers. If you have not heard from us directly, you were not impacted. We continue to prioritize security as a core tenet of our company, products and services. We are committed to supporting our customers and communicating transparently about this incident. **What we did in response**... - Secured affected accounts - Revoked all active sessions and sign-ins - Rotated compromised Mixpanel credentials for impacted accounts - Blocked malicious IP addresses - Registered IOCs in our SIEM platform - Performed global password resets for all Mixpanel employees - Engaged third-party forensics firm to advise on containment and eradication measures... - Performed a forensic review of authentication, session, and export logs across impacted accounts - Implemented additional controls to detect and block similar activity going forward. - Engaged with law enforcement and external cybersecurity advisors **What you should know** - If you received a communication from us, please review it for the steps we have taken to secure your account, as well as next steps. - If you did not receive a communication from us, no action is required. Your accounts were not impacted. If you have any questions about this incident, please contact support@mixpanel.com. 3. Mixpanel Acquires DoubleLoop to Drive Product-to-Revenue ... URL: https://www.businesswire.com/news/home/20251007207374/en/Mixpanel-Acquires-DoubleLoop-to-Drive-Product-to-Revenue-Outcomes-with-AI Date: 2025-10-07 Snippet: **Mixpanel Acquires DoubleLoop to Drive Product-to-Revenue Outcomes with AI** **Mixpanel Acquires DoubleLoop to Drive Product-to-Revenue Outcomes with AI** Acquisition accelerates Mixpanel’s mission to turn data into decisions by seamlessly connecting product metrics to business value with AI SAN FRANCISCO--(BUSINESS WIRE)--Mixpanel, the global leader in digital analytics, today announced the acquisition of DoubleLoop, a pioneer in AI-powered business value frameworks. The acquisition strengthens Mixpanel’s position as the most innovative digital analytics platform, enabling product and marketing teams to identify key business growth drivers in seconds with AI.... Earlier this year, Mixpanel launched Metric Trees which helps teams to visualize and understand the relationship between a product metric and business outcome. This powerful mapping, coupled with Mixpanel’s suite of capabilities in behavioral analysis, session replay, experimentation and feature flagging provides powerful insights that enable teams to build products and customer experiences to fuel business growth.... Across industries, there is a growing shift away from vanity metrics and toward defining metric hierarchies and causal relationships. At the same time, organizations are under pressure to move from strategy to measurement in days or hours, rather than weeks or months. Slow, manual processes for defining and aligning on metrics to support and drive strategy remain a bottleneck for many organizations.... “Metrics without context and relationships are just numbers,” said Jen Taylor, CEO of Mixpanel. “Teams need to know not only which metrics matter, but how those metrics are aligned and connected. That’s why we launched Metric Trees, and the market response has been phenomenal. With DoubleLoop, we can make this game-changing capability more accessible by infusing AI directly into the process to build hierarchies directly from strategy and real-world context.”... CEO Dan Schmidt and CTO Sumit Gupta co-founded DoubleLoop to solve a challenge that many product teams face: shipping product features without knowing their impact on critical business KPIs. According to Schmidt, 65% of projects fail to create measurable results. DoubleLoop’s technology uses AI to turn strategy into computational models. This means that companies can automatically generate a metric tree with its unique context and proven industry patterns to surface critical links between goals, inputs, and outcomes. This helps teams instantly connect their individual work to business outcomes and continuously refine those connections as data evolves.... "We founded DoubleLoop to help product teams escape the feature factory and drive impact,” said Schmidt. “Inside Mixpanel, Metric Trees and AI can do what’s never been possible before: connect business goals directly to user behavior — at a scale that empowers thousands of teams to know with confidence which levers truly drive growth.”... Mixpanel customers using Metric Trees cite an improvement in building a shared understanding of the relationships between metrics and the ability to understand the right growth drivers for their business. They are able to understand how product performance connects to business results and take action on strategic initiatives with the confidence of knowing their impact before they start work.... "Metric Trees are about having a sustained, executive-level view of your product, not just ad hoc analysis,” said Karl Thumm, Senior Director of Data and Analytics at Zola, a leading player in wedding registry. “The added functionality around metric definitions and the ability to double-click into deeper insights makes it core to truly managing your product properly.”... **About Mixpanel** Mixpanel is the leading product analytics platform trusted by 29,000 companies to help measure what matters, make better decisions, and deliver customer value. With powerful solutions like Metric Trees, advanced analytics, session replay, experimentation and collaborative data workflows, Mixpanel empowers companies to connect product innovation to business outcomes. Learn more at mixpanel.com. **About DoubleLoop** DoubleLoop is a pioneer in value frameworks, enabling teams to align strategic goals with the metrics that drive success. Leveraging AI and proven frameworks, DoubleLoop helps leading innovators identify, structure, and prioritize the measures that matter most.... ## Contacts **Media Contact ** Ryan Quintana prformixpanel@bospar.com ### Mixpanel ### Contacts **Media Contact ** Ryan Quintana prformixpanel@bospar.com ## Leading Data Analytics Platform Mixpanel Appoints Jen Taylor as CEO to Lead the Next Chapter of the Company’s Growth... ## Mixpanel Launches Metric Trees, a Dynamic In-Platform Capability That Connects Every KPI to Business Impact ## Mixpanel Expands Digital Analytics Platform to Power Continuous Innovation at Scale ### Mixpanel ### Contacts **Media Contact ** Ryan Quintana prformixpanel@bospar.com 4. Mixpanel - Wikipedia URL: https://en.wikipedia.org/wiki/Mixpanel Date: 2014-09-16 Snippet: **Mixpanel** is an event analytics service company that tracks user interactions with web and mobile applications. Data collected is used to build custom reports and measure user engagement and retention. Mixpanel works with web applications, in particular SaaS, but also supports mobile apps.... ## History Mixpanel was founded by Suhail Doshi and Tim Trefren in 2009 and is based in San Francisco, California. It is backed by Y Combinator, and its list of investors includes Andreessen Horowitz, Max Levchin and Keith Rabois. Doshi credits Levchin for Mixpanel's survival and subsequent success.... In April 2018, founder and CEO Suhail Doshi announced he would step down and become chairman of the board. He was replaced as CEO by Amir Movafaghi. In May 2023, Mixpanel launched Mixpanel Marketing Analytics to allow marketers to track event-based analytics. In Sept. 2025, Jen Taylor was named CEO.... ## Funding Mixpanel's second funding round happened in December 2014, a Series B round led by Andreessen Horowitz, with $65M raised at a pre-money valuation of $800M. Mixpanel's most recent funding round happened in November 2021, raised a Series C round, a $200 million investment on a $1.05 billion valuation from Bain Capital Tech Opportunities.... ## Mixpanel–OpenAI security incident (2025) In November 2025, OpenAI and CoinTracker disclosed that their third-party analytics provider Mixpanel had experienced a security incident involving unauthorized access to part of Mixpanel’s systems. According to OpenAI and CoinTracker, an attacker exported a dataset containing limited customer-identifiable analytics information. Exposed data included names and email addresses associated with API accounts, coarse location metadata, browser and operating-system details, referring websites and organization or user IDs (for OpenAI) and limited transaction summaries (for CoinTracker).... No chat data, API request content, logs, passwords, API keys, payment information, wallet addresses, recovery phrases, private keys, tax forms, exchange-connected transaction data, bank account or credit card information, Social Security numbers or other government-issued IDs, or other sensitive data were affected.... OpenAI and CoinTracker removed Mixpanel from their production environments, began notifying impacted users, and initiated a broader review of external vendors. Mixpanel stated that the incidents resulted from a targeted SMS-based social-engineering attack and said it had revoked sessions, rotated credentials, blocked malicious IPs, and engaged external cybersecurity investigators. OpenAI and CoinTracker advised affected users to remain vigilant against phishing or social-engineering attempts.... ## References ## General references ## External links - Official website | |This United States corporation or company article is a stub. You can help Wikipedia by expanding it.| |--|--| Categories: - Business intelligence companies - Analytics - Companies based in San Francisco - United States company stubs - Bain Capital companies 5. Mixpanel URL: https://techcrunch.com/tag/mixpanel/ Date: 2023-05-02 Snippet: Tonight! StrictlyVC concludes its 2025 series with an exclusive event featuring deep tech insights from leading backers builders such as Pat Gelsinger, Max Hodak, Nicholas Kelez, and more. Plus, opportunities for high-quality networking.Last chance to get front row access to fresh, candid insights on the future of deep tech. Don’t miss it!... Amazon challenges competitors with on-premises Nvidia ‘AI Factories’ Amazon releases an impressive new AI chip and teases an Nvidia-friendly roadmap Apple just named a new AI chief with Google and Microsoft expertise, as John Giannandrea steps down At least 80 new tech unicorns were minted in 2025 so far... New York state law takes aim at personalized pricing How OpenAI and Google see AI changing go-to-market strategies Anduril’s autonomous weapons stumble in tests and combat, WSJ reports 6. Mixpanel Security Breach URL: https://news.ycombinator.com/item?id=46066522 Date: 2025-11-27 Snippet: cobertos 4 days ago * What systems were accessed * What information was potentially exposed * Just how "proactively" they've been about this (no timeline) * Numbers... The scale of any of it ---... Some comments from quoted portions of article > Mixpanel detected a smishing campaign ... Doesn't give any details on who the companion targeted, or how, or how widespread. > We took comprehensive steps to contain and eradicate unauthorized access and secure impacted user accounts. So there was definitely _some_ sort of unauthorized access, but doesn't say to which accounts or in what systems... > Performed global password resets for all Mixpanel employees So... definitely sounds like they expected compromise of Mixpanel employee credentials gorgoiler 4 days ago ”Out of transparency and our desire to share with our community…” also reminds me when I get a refund that is prefixed with ”as a one-time gesture of goodwill…” instead of ”sorry, we made a mistake”.... What to know about a recent Mixpanel security incident Transparency is important to us... They're so much transparent that they leaked PII to Mixpanel... guiambros 3 days ago SilverElfin 3 days ago https://news.ycombinator.com/item?id=46065585 neoecos 3 days ago... saghm 3 days ago esseph 4 days ago nozzlegear 4 days ago breppp 4 days ago skeeter2020 3 days ago retrochameleon 1 day ago https://news.ycombinator.com/item?id=46071239 And it looks like many companies got affected because their data was stolen via gainsight. The hackers said they plan to ask the companies for ransoms.... tedggh 3 days ago joshdavham 3 days ago Mixpanel certainly has more info than OpenAI, yet has determined to share far less with the public. This reflects very poorly on them as a company. [0] https://openai.com/index/mixpanel-incident/ theli0nheart 3 days ago... > Trust, security, and privacy are foundational to our products, our organization, and our mission. We are committed to transparency, and are notifying all impacted customers and users. We also hold our partners and vendors accountable for the highest bar for security and privacy of their services. After reviewing this incident, OpenAI has terminated its use of Mixpanel.... flockonus 3 days ago autoexec 4 days ago Considering they were aware of this on the 8th (who knows how long that was after it actually happened) it's a little disappointing that they'd wait until the day before such a major holiday to post about it. Unsurprising sure, but still disappointing.... gcbirzan 4 days ago thinkindie 4 days ago > As a valued customer, we wanted to inform you about a recent security incident that affected a limited number of Mixpanel user accounts. We have proactively communicated with all impacted customers. If we did not previously contact you, your Mixpanel accounts were not impacted. We continue to prioritize security as a core tenant of our company, products and services. We are committed to supporting our customers and communicating transparently about this incident.... macki0 4 days ago stevesimmons 3 days ago denuoweb 4 days ago This was not a breach of OpenAI’s systems. No chat, API requests, API usage data, passwords, credentials, API keys, payment details, or government IDs were compromised or exposed.... What happened On November 9, 2025, Mixpanel became aware of an attacker that gained unauthorized access to part of their systems and exported a dataset containing limited customer identifiable information and analytics information. Mixpanel notified OpenAI that they were investigating, and on November 25, 2025, they shared the affected dataset with us.... OpenAI likely provides this disclosure to comply with US state privacy laws, but it's inaccurate to say they didn't disclose that they won't share your information [0] https://openai.com/policies/privacy-policy/ sanex 3 days ago XCSme 3 days ago csomar 4 days ago ares623 4 days ago... w-m 4 days ago > Has Mixpanel been removed from OpenAI products? > Yes. https://openai.com/index/mixpanel-incident/ philipwhiuk 3 days ago stuartjohnson12 3 days ago weird-eye-issue 4 days ago pletnes 4 days ago... "As part of our security investigation, we removed Mixpanel from our production services" "After reviewing this incident, OpenAI has terminated its use of Mixpanel." bilekas 4 days ago > Smishing is a cyber-attack that targets individuals through SMS (Short Message Service) or text messages. The term is a combination of “SMS” and “phishing.”... Whether it was wise or not for OpenAI to share this information with Mixpanel is another thing, personally I think they should not have but OpenAI in turn is also used by lots of companies and given their private data and so on. This layercake of trust only needs on party to mess up for a breach to become reality. What I'm interested in is whether or not it was just OpenAI's data that was lifted or also other Mixpanel customers.... beAbU 4 days ago cyberax 3 days ago And it's easy to let things like names and emails slip through. codedokode 4 days ago macNchz 3 days ago Also probably people on the product marketing team want to have identifying info in their dashboards of top users and churn risks and whatever, and someone has to be the one to tell them no.... neom 4 days ago spacebanana7 4 days ago It's just a very weazel-worded disclosure. Most definitely a breach. thepasswordapp 3 days ago The pattern keeps repeating: Trust vendor → Vendor gets breached → Your users' data exposed. And the cascading effect here is notable - Mixpanel breach → OpenAI API users exposed → Those users likely reused credentials elsewhere.... cmiles8 3 days ago The OpenAI disclosure is a better summary of what happened than Mixpanel is stating directly. Looks like OpenAI has fired Mixpanel as a product over this issue: “We also hold our partners and vendors accountable for the highest bar for security and privacy of their services. After reviewing this incident, OpenAI has terminated its use of Mixpanel.”... That’s a pretty damning statement about a vendor that you don’t see written often publicly like that. devin 3 days ago... LostMyLogin 4 days ago gotosun 4 days ago No reason to send your data to other companies. ddxv 3 days ago https://appgoblin.info/companies/mixpanel.com soared 4 days ago Transparency is important to us, so we want to inform you about a recent security incident at Mixpanel, a data analytics provider that OpenAI used for web analytics on the frontend interface for our API product (platform.openai.com). The incident occurred within Mixpanel’s systems and involved limited analytics data related to your API account.... Operating system and browser used to access the API account Referring websites Organization or User IDs associated with the API account Our response As part of our security investigation, we removed Mixpanel from our production services, reviewed the affected datasets, and are working closely with Mixpanel and other partners to fully understand the incident and its scope. We are in the process of notifying impacted organizations, admins, and users directly. While we have found no evidence of any effect on systems or data outside Mixpanel’s environment, we continue to monitor closely for any signs of misuse.... Trust, security, and privacy are foundational to our products, our organization, and our mission. We are committed to transparency, and are notifying all impacted customers and users. We also hold our partners and vendors accountable for the highest bar for security and privacy of their services. After reviewing this incident, OpenAI has terminated its use of Mixpanel.... The security and privacy of our products are paramount, and we remain resolute in protecting your information and communicating transparently when issues arise. Thank you for your continued trust in us. For more information about this incident and what it means for impacted users, please see our blog post here. Please contact your account team or mixpanelincident@openai.com if you have any questions or need our support.... The fact that Mixpanel has this data in non-de-identified form is suspect to me. Granted, my entire comment was clearly tongue-in-cheek. Although I think it's possible that OpenAI is selling this data to get a discount on Mixpanel usage, in reality I understand that the more likely explanation is that whoever was responsible for managing this data is completely and totally incompetent.... The way mixpanel works is that they tag users with a device ID, then once they become a customer, you back port your own customer ID to mix panel and they switch the device ID to your internal customer record so that you can see what your signed up users are doing, where they signed up from and generally track the user journey. * What systems were accessed * What information was potentially exposed * Just how "proactively" they've been about this (no timeline) * Numbers... The scale of any of it... --- Some comments from quoted portions of article > Mixpanel detected a smishing campaign ... Doesn't give any details on who the companion targeted, or how, or how widespread. > We took comprehensive steps to contain and eradicate unauthorized access and secure impacted user accounts. So there was definitely _some_ sort of unauthorized access, but doesn't say to which accounts or in what systems > Performed global password resets for all Mixpanel employees So... definitely sounds like they expected compromise of Mixpanel employee credentials 7. A New Chapter for Mixpanel: My Conversation with CEO Jen Taylor URL: https://dataanalysis.substack.com/p/a-new-chapter-for-mixpanel Date: 2025-09-24 Snippet: # A New Chapter for Mixpanel: My Conversation with CEO Jen Taylor ### She shares her values, strategy, and how AI can turn analytics from reactive to proactive. *Welcome to the Data Analysis Journal, a weekly newsletter about data science and analytics.* A few weeks ago, the analytics world got big news: Mixpanel appointed Jen Taylor as its new CEO, succeeding Amir Movafaghi.... For anyone working with user interaction data, Mixpanel needs no introduction. It’s one of the most established analytics tools, used by more than 29,000 companies worldwide, and has had a huge impact on product and marketing analytics. I’ve been using Mixpanel since 2012, and it’s shaped the way I work as an analyst. I still use it a lot today, following its features, updates, and announcements closely. So when I heard Jen was stepping in as CEO, I wanted to understand what this means for Mixpanel, its users, its competitors, and the analytics space overall.... Two weeks ago, I had the chance to meet Jen for a candid conversation about the state of product and marketing analytics, how AI is reshaping the field, and how Mixpanel is positioning itself to embrace this change and drive growth.... Jen Taylor served as President at Plaid and Chief Product Officer at Cloudflare, where she helped grow the company from $100 million to $1 billion. Before that, she led product and data initiatives at Salesforce, Facebook, and Adobe. Now she is joining Mixpanel, and I’m (selfishly) hoping we’ll see more new features, more success stories, and innovation that accelerates analytics without compromising trust or accuracy.... Today, I’m excited to share my interview with Jen, along with her perspective, values, and vision for how Mixpanel will lead and transform analytics. What are the next steps for you and for Mixpanel? Part of what drew me to Mixpanel is my long-standing passion for understanding customers and users. I’ve spent most of my career as a product manager, and my true north has always been the customer. Tools like Mixpanel have been transformational for me because they allow you to... **marry quantitative behavior with qualitative insights in a way that gives a much deeper understanding of the user.** Right now, I see 2 forces that are especially transformational: **The market is shifting away from looking at product analytics in a silo.** With advances in data warehousing and infrastructure, we can now combine product analytics with other data sources across the business. That means getting a more complete picture of the customer and driving value not just for product teams, but also for business and financial stakeholders. Mixpanel has a huge opportunity to accelerate that shift.... **We’re in a moment where AI can fundamentally change how analytics work.** For Mixpanel, AI can make implementation easier, strengthen data governance, and speed up how people turn questions into dashboards. More importantly, it can shift analytics from reactive, where users pull insights, to proactive, where the system surfaces insights, suggestions, and areas to focus on.... For me, the exciting part is listening to customers and working with the team to figure out where those changes create the biggest opportunities or challenges, and how we can refine our strategy to meet those needs. Amplitude just launched AI Agents. Is Mixpanel planning to launch similar AI features? Do customers even ask for it? Mixpanel has been working with machine learning and AI for some time now. Over a year ago, we launched Spark AI (Ask Spark AI), and more recently, we’ve released a set of new technologies that are still in beta as we continue exploring how to integrate AI throughout the platform.... I see our role in AI in 2 main ways - applying AI to the real problems we hear from our customers and see in the market, and then it’s about helping our customers learn, adopt, and get value from AI. AI is incredibly powerful, but it takes time to understand and even more time to build trust in the results. Part of our journey at Mixpanel is to meet customers where they are today and support them as they grow with these technologies.... What is your long-term vision for Mixpanel? How are you thinking of differentiating from other digital analytics tools? I absolutely see us continuing to refine and define who we are, and that will be based on how we understand the opportunities and needs of our customers, and how we position ourselves within the broader ecosystem of tools and solutions they use.... Most of our customers work in heterogeneous environments - using Mixpanel alongside other data platforms, financial systems, and more. The question for us is: how do we fit within that ecosystem, and how can we serve as a multiplier for our customers and their products? One of the things that drew me to Mixpanel is its continuous focus, since day one, on... *. As a product manager, I’ve seen how much organizations aspire to that, but also how hard it is to achieve. Given the technical moment we’re in now, I believe Mixpanel is uniquely positioned to lean into it as a real differentiator. democratizing action and insight* The team has been cranking out... *innovation*, expanding into session replay, experimentation, and more. Just before I joined, we launched metric trees. We’re constantly working with our users to understand their needs and how we can broaden the capabilities that help them better understand how people are using their products. Mixpanel has many new great features! Even as a power user, I haven’t had the chance to try some.... That’s a classic software conundrum: people get to know a product at a certain point in time, and then the challenge becomes - *how do you help them discover and use new capabilities?* They tend to stick with what they already know. Our job is to keep evolving and improving the features they use today, while also introducing new ones that could be incredibly valuable to them.... Are you thinking about expanding the team, maybe even setting up more headquarters in different regions for Mixpanel? Right now, I’m in listen-and-learn mode. I’m getting to know the team and our customers. Our strategy around locations and the markets we serve will be completely driven by where we see demand and where we find talent.... One of the things I really enjoy about Mixpanel is that it’s a truly global organization, with offices in San Francisco, London, Barcelona, Bangalore, and Singapore. Our customers are all around the world. That global reach is both important and impactful. I also believe that the diversity of experience is critical. What values do you want to bring to your team at Mixpanel?... A big part of what helped me through the decision-making process to join Mixpanel was feeling that the culture and values of the company were very aligned with who I am and how I lead. That gave me confidence that I could come in as a new leader, listen and learn, and work within a culture that’s already incredibly successful, while also thinking about how we can continue to evolve and grow together.... The *collaboration*, *teamwork*, *integrity*, and *empathy* I see within the organization are all closely aligned with how I lead. And, of course, there’s the strong focus on *customer centricity*. Thank you, Jen! Closing remark: Certainly, I’m impressed with Jen’s experience and her openness to feedback. We also discussed some of Mixpanel’s features and analytic challenges, such as maintaining and enforcing taxonomies or metric trees, and I can tell Jen feels the product and knows the space very well.... The biggest value analytics tools can offer is recognizing your product’s unique structure and value proposition, and then tailoring the analytics experience to fit your specific footprint. The challenge is how to make general frameworks work for a particular product. How to adapt copy-paste templates to your own data. That’s hard to do. This is where AI can make a real difference - by recognizing your event structure, data volume, organization structure, and product type, then guiding you through analytics implementation and consumption, helping you take full advantage of the features and frameworks available today. Would love to see Mixpanel manifesting it. 8. OpenAI discloses API customer data breach via Mixpanel vendor hack URL: https://www.bleepingcomputer.com/news/security/openai-discloses-api-customer-data-breach-via-mixpanel-vendor-hack/ Date: 2025-11-27 Snippet: # OpenAI discloses API customer data breach via Mixpanel vendor hack ###### Ionut Ilascu - November 27, 2025 - 06:27 AM - 0 OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. Mixpanel offers event analytics that OpenAI uses to track user interactions on the frontend interface for the API product.... According to the AI company, the cyber incident affected “limited analytics data related to some users of the API” and did not impact users of ChatGPT or other products. “This was not a breach of OpenAI’s systems. No chat, API requests, API usage data, passwords, credentials, API keys, payment details, or government IDs were compromised or exposed,” OpenAI says in a press release.... Mixpanel reported that the attack “impacted a limited number of our customers” and resulted from a smishing (SMS phishing) campaign that the company detected on November 8. OpenAI received details of the affected dataset on November 25 after being informed of Mixpanel’s ongoing investigation. The AI company notes that the exposed information may include:... - Name that was provided to us on the API account - Email address associated with the API account - Approximate coarse location based on API user browser (city, state, country) - Operating system and browser used to access the API account - Referring websites - Organization or User IDs associated with the API account... Because no sensitive credentials were exposed, users do not need to reset passwords or regenerate API keys. Some users are reporting that CoinTracker, a cryptocurrency portfolio tracker and tax platform, has also been impacted, with exposed data also including device metadata and limited transaction count. OpenAI has started an investigation to determine the full scope of the incident. As a precaution, it has removed Mixpanel from its production services and is notifying organizations, administrators, and individual users directly.... While OpenAI underlines that only users of its API are impacted, it notified all its subscribers. The company warns that the leaked data could be leveraged in phishing or social-engineering attacks and advises users to watch for credible-looking malicious messages related to the incident. Messages containing links or attachments should be verified to ensure they originate from an official OpenAI domain.... The company also urges users to enable 2FA and never send sensitive information, including passwords, API keys, or verification codes, through email, text, or chat. Mixpanel’s CEO, Jen Taylor, said that all impacted customers have been contacted directly. “If you have not heard from us, you were not impacted,” she noted. In response to the attack, Mixpanel secured affected accounts, revoked active sessions and sign-ins, rotated compromised credentials, blocked the threat actor’s IP addresses, and reset passwords for all employees. The company has also implemented new controls to prevent similar incidents in the future.... ## Break down IAM silos like Bitpanda, KnowBe4, and PathAI Broken IAM isn't just an IT problem - the impact ripples across your whole business. This practical guide covers why traditional IAM practices fail to keep up with modern demands, examples of what "good" IAM looks like, and a simple checklist for building a scalable strategy.... ## Post a Comment Community Rules ## You need to login in order to post a comment Not a member yet? Register Now 9. DoubleLoop joins Mixpanel | News URL: https://www.research-live.com/article/news/doubleloop-joins-mixpanel/id/5143653 Date: 2025-10-13 Snippet: # DoubleLoop joins Mixpanel In a blog post from Jen Taylor, chief executive at Mixpanel, the firm said that the companies’ combined platform would provide users with analytics, AI automation and strategic analysis. San Francisco-based DoubleLoop uses AI to support the process of surfacing and structuring metrics, and runs a Metric Trees product to help visualise company metrics.... Edward Hsu, chief product officer at Mixpanel, said that “teams proficient in digital analytics still lack the context of how their work impacts business objectives”, adding that the new acquisition would strengthen the Mixpanel platform. Dan Schmidt, chief executive at DoubleLoop, added that as part of Mixpanel, DoubleLoop could better “connect business goals directly to user behaviour – at a scale that empowers thousands of teams to know with confidence which levers truly drive growth”.... #### We hope you enjoyed this article. Research Live is published by MRS. The Market Research Society (MRS) exists to promote and protect the research sector, showcasing how research delivers impact for businesses and government. Members of MRS enjoy many benefits including tailoured policy guidance, discounts on training and conferences, and access to member-only content. For example, there's an archive of winning case studies from over a decade of MRS Awards. Find out more about the benefits of joining MRS here. ## 0 Comments 10. OpenAI hailed for 'swift move' in terminating Mixpanel ties after data ... URL: https://www.itpro.com/security/data-breaches/openai-mixpanel-data-breach-response Date: 2025-11-28 Snippet: OpenAI has admitted a security breach at a third-party supplier exposed customer emails, location information, and “limited analytics data related to some users of the API”. The supplier, Mixpanel, provides data analytics services via OpenAI’s developer platform. OpenAI said the platform is used to help “understand product usage” and improve services for its API product,... *platform.openai.com*. On 9 November, Mixpanel discovered an attacker gained unauthorized access to systems. They then exfiltrated a dataset containing “limited customer identifiable information and analytics information”. A full outline of data exposed, per an __OpenAI statement__ on the breach, includes: - Names provided via Mixpanel API accounts - Email addresses associated with the API account - “Aproximate course location based on API user browsers” (including city, state, and country) - Information on operating systems and browsers used to access the API account - Referring websites associated with the API account... OpenAI has been keen to stress that the breach only affects developers and not general ChatGPT users. It also said developer credentials – including passwords, payment information, and government IDs – weren’t exposed. OpenAI added that it’s currently in the process of notifying those affected by the incident.... ## A swift response from OpenAI Upon discovery of the breach, OpenAI said it removed Mixpanel from production services and began a review of affected datasets. Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives... While the investigation is still ongoing, the company noted it has so far found “no evidence of any effect on systems or data outside Mixpanel’s environment”. The company has since terminated its use of the data analytics platform and said it will conduct a review of its broader supplier ecosystem. “Trust, security, and privacy are foundational to our products, our organisation, and our mission, OpenAI said in a statement. “We also hold our partners and vendors accountable for the highest bar for security and privacy of their services.”... Jake Moore, global cybersecurity advisor at ESET, commended OpenAI for its “swift move” in alerting users and cutting ties with the supplier. Many organizations try to minimize security incidents and keep them “under the radar”, he said. “Companies often fear the aftermath of an attack and presume it will be brand damaging,” Moore commented. “However, openness is now deemed far more important and speed is usually of the essence in making anyone affected aware of the situation.”... ## Developers warned to remain vigilant OpenAI said information exposed in the breach could be used by hackers to carry out future attacks on users and encouraged them to “remain vigilant”. These types of warnings are common in the wake of a data breach, according to Moore. “Even though the exposed data was low-sensitivity, it could still be misused in the likes of social engineering techniques or via phishing attacks because attackers could combine the data such as name, email, even approximate location data to craft convincing fraudulent messages,” he explained.... “As within the wake of typical data compromises, those affected need to remain vigilant for suspicious emails or other strange communications.” *Make sure to follow * *ITPro on Google News* * to keep tabs on all our latest news, analysis, and reviews.*... ### MORE FROM ITPRO - Gartner says 40% of enterprises will experience ‘shadow AI’ breaches by 2030 - AI breaches aren’t just a scare story any more – they’re happening in real life - Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposed... Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.... For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn. Cyber researchers have already identified several big security vulnerabilities on OpenAI’s Atlas browser News Security researchers have uncovered a Cross-Site Request Forgery (CSRF) attack and a prompt injection technique... Teens arrested over nursery chain Kido hack news The ransom attack caused widespread shock when the hackers published children's personal data Red Hat reveals unauthorized access to a GitLab instance where internal data was copied News Crimson Collective has claimed the attack, saying it has accessed more than 28,000 Red Hat repositories Google warns executives are being targeted for extortion with leaked Oracle data... News Extortion emails being sent to executives at large organisations appear to show evidence of a breach involving Oracle's E-Business Suite Harrods rejects contact with hackers, after 430,000 customer records stolen from third-party provider News The luxury department store has denied any link to a failed attack on its systems in May... Kido nursery hackers threaten to release more details – along with the personal data of 100 employees News The attack is the first to be claimed by the new threat group 'Radiant' Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b model... News Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API. LevelBlue and Akamai are teaming up to launch a managed web application and API protection service News The new Managed WAAP offering aims to help organizations secure their rapidly expanding web app and API ecosystems

mixpanel