Unauthorized Access to ChatGPT Accounts Exposes Sensitive Data and Enables Scams

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Multiple reports highlight that unauthorized access to ChatGPT accounts can expose sensitive user data, including personal, professional, and confidential documents. Cybercriminals may exploit this information for personalized scams, fraud, and social engineering attacks, affecting both individuals and organizations. ESET Latinoamérica recommends enhanced security measures to mitigate risks.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article explicitly involves an AI system (ChatGPT) whose account theft leads to direct harm through exposure of sensitive data, enabling social engineering attacks, unauthorized financial transactions, and broader organizational risks. The harms include violations of privacy and potential economic losses, fitting the definition of an AI Incident. The article describes realized harm rather than potential harm, and it is not merely complementary information or unrelated news. Hence, the classification as AI Incident is appropriate.[AI generated]
AI principles
Privacy & data governanceRobustness & digital security

Industries
Digital security

Affected stakeholders
ConsumersBusiness

Harm types
Economic/PropertyHuman or fundamental rights

AI system task:
Interaction support/chatbots


Articles about this incident or hazard