Summary: Mixpanel suffers major data breach and loses OpenAI

Why It Matters: A significant security incident at Mixpanel has led to the exposure of sensitive user data from high-profile clients like OpenAI and PornHub, resulting in public contract terminations and legal action.

What Changed:

• Mixpanel confirmed a data breach caused by a smishing (SMS phishing) campaign.
• OpenAI officially terminated its integration with Mixpanel following the exposure of developer names and emails.
• Multiple reports indicate sensitive user activity from PornHub Premium and crypto casino Stake was exposed.
• A class-action lawsuit was filed against Mixpanel regarding the 2025 security failure.
• PostHog experienced a separate security issue involving a supply-chain attack on its npm packages.
• Mixpanel launched several new Google Ad creatives during this period.