{"id":606,"date":"2023-04-21T06:25:47","date_gmt":"2023-04-21T11:25:47","guid":{"rendered":"https:\/\/kentprotect.com\/?p=606"},"modified":"2023-04-22T06:37:33","modified_gmt":"2023-04-22T11:37:33","slug":"breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/","title":{"rendered":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI, ChatGPT, 1.2% of users in a 9-hour window on March 20th, 2023, and, potentially, other ChatGPT users. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 20, 2023: At 1 AM PST, ChatGPT\/OpenAI introduces a redis-py library bug during a change pushed into production. Breach starts. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 20, 2023: At 10 AM PST, breach allegedly stops per ChatGPT. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 24, 2023: OpenAI publishes a breach notice on its website and confirms the bug is patched. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI updated their open-source redis-py library in production at 1 AM, resulting in server-side caching errors and the breach of sensitive data for approximately 9 hours (OpenAI, 2023). Approximately 1.2% of active users between the hours of 1 and 10 AM PST were affected, and the data potentially breached included: &#8220;user\u2019s first and last name, email address, payment address, credit card type and the last four digits (only) of a credit card number, and credit card expiration date&#8221; (OpenAI, 2023). An &#8220;outage&#8221; was also associated with the incident, however, this appeared to be an incident response (Abrams, 2023). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Potential, internal incident response costs, potential lost business and operational costs due to downtime, investigation, and troubleshooting,<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Change management: open-source Redis-py library update introduced code conflict into production, allowing &#8220;corrupted data&#8221; from other users to be returned from a Redis cache to any valid user&#8217;s requests. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Extensive regression testing is mandatory for software-based companies before pushing code into production. Just take a look at the remediation steps by OpenAI: <\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Extensively tested our fix to the underlying bug.<\/li>\n\n\n\n<li>Added redundant checks to ensure the data returned by our Redis cache matches the requesting user.<\/li>\n\n\n\n<li>Programatically examined our logs to make sure that all messages are only available to the correct user.<\/li>\n\n\n\n<li>Correlated several data sources to precisely identify the affected users so that we can notify them.<\/li>\n\n\n\n<li>Improved logging to identify when this is happening and fully confirm it has stopped.<\/li>\n\n\n\n<li>Improved the robustness and scale of our Redis cluster to reduce the likelihood of connection errors at extreme load. (OpenAI, 2023)<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Another thought: extensive monitoring is required during a push to production (even at 1 AM). Monitoring social media should also be a part of this effort, as Twitter users reported seeing the bug in real time (Abrams, 2023). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Abrams, L. (2023, March 24). OpenAI: ChatGPT payment data leak caused by open-source bug. <em>BleepingComputer<\/em>. https:\/\/www.bleepingcomputer.com\/news\/security\/openai-chatgpt-payment-data-leak-caused-by-open-source-bug\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI. (2023, March 24). <em>March 20 ChatGPT outage: Here\u2019s what happened<\/em>. Retrieved April 21, 2023, from https:\/\/openai.com\/blog\/march-20-chatgpt-outage<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI (logowik). (n.d.). <em>openai-chatgpt-4038641.logowik.com.webp<\/em>. logowik.com. https:\/\/logowik.com\/content\/uploads\/images\/openai-chatgpt-4038641.logowik.com.webp<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th\" width=\"640\" height=\"480\" src=\"https:\/\/www.youtube.com\/embed\/nAPKk2c41E8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>One-sentence summary: ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of<\/p>\n","protected":false},"author":4,"featured_media":607,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[538,534,480,3,12,85,533,13,76,63,274,75,61,11,10,74,535,14,8,27,536,532,67,411,539,15,81],"class_list":["post-606","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-4-0","tag-artificialintelligence","tag-breach","tag-breach-report","tag-breaches","tag-california","tag-chatgpt","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-data-breach","tag-deepintelligence","tag-executive","tag-kent-protect","tag-kentprotect","tag-machinelearning","tag-openai","tag-pwned","tag-sanfran","tag-sanfrancisco","tag-summary","tag-texas"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect<\/title>\n<meta name=\"description\" content=\"ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-21T11:25:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-22T11:37:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"866\" \/>\n\t<meta property=\"og:image:height\" content=\"650\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th\",\"datePublished\":\"2023-04-21T11:25:47+00:00\",\"dateModified\":\"2023-04-22T11:37:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/\"},\"wordCount\":482,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/openai-chatgpt-4038641.logowik.com_.webp\",\"keywords\":[\"4.0\",\"artificialintelligence\",\"breach\",\"breach report\",\"breaches\",\"california\",\"chatgpt\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"data breach\",\"deepintelligence\",\"executive\",\"kent protect\",\"kentprotect\",\"machinelearning\",\"openAI\",\"pwned\",\"sanfran\",\"sanfrancisco\",\"summary\",\"texas\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/\",\"name\":\"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/openai-chatgpt-4038641.logowik.com_.webp\",\"datePublished\":\"2023-04-21T11:25:47+00:00\",\"dateModified\":\"2023-04-22T11:37:33+00:00\",\"description\":\"ChatGPT\\\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/openai-chatgpt-4038641.logowik.com_.webp\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/openai-chatgpt-4038641.logowik.com_.webp\",\"width\":866,\"height\":650,\"caption\":\"OpenAI ChatGPT 4.0 logo (image source: OpenAI (logowik), n.d.)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/21\\\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect","description":"ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect","og_description":"ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/","og_site_name":"Kent Protect","article_published_time":"2023-04-21T11:25:47+00:00","article_modified_time":"2023-04-22T11:37:33+00:00","og_image":[{"width":866,"height":650,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp","type":"image\/webp"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th","datePublished":"2023-04-21T11:25:47+00:00","dateModified":"2023-04-22T11:37:33+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/"},"wordCount":482,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp","keywords":["4.0","artificialintelligence","breach","breach report","breaches","california","chatgpt","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","data breach","deepintelligence","executive","kent protect","kentprotect","machinelearning","openAI","pwned","sanfran","sanfrancisco","summary","texas"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/","name":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp","datePublished":"2023-04-21T11:25:47+00:00","dateModified":"2023-04-22T11:37:33+00:00","description":"ChatGPT\/OpenAI released an update at 1 AM on Monday, March, 20th, causing the potential breach of sensitive data of over 1.2% of users within a 9-hour window.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/openai-chatgpt-4038641.logowik.com_.webp","width":866,"height":650,"caption":"OpenAI ChatGPT 4.0 logo (image source: OpenAI (logowik), n.d.)"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/21\/breach-report-1-2-of-chatgpt-users-data-breached-in-9-hour-window-on-march-20th\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: 1.2% of ChatGPT users and their data breached in 9-hour window on March 20th"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=606"}],"version-history":[{"count":7,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/606\/revisions"}],"predecessor-version":[{"id":630,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/606\/revisions\/630"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/607"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}