Summary: Mixpanel and PostHog suffer major data breaches

Why It Matters: Two major competitors are facing significant security crises, leading to customer data exposure, legal action, and loss of major clients like OpenAI.

What Changed:

• Mixpanel reported a data breach via a smishing campaign that exposed user data from OpenAI, Stake, and PornHub.
• OpenAI officially terminated its partnership with Mixpanel following the security incident.
• PostHog’s npm and Maven packages were compromised in a "Shai-Hulud" supply chain attack, exposing developer credentials.
• A class action lawsuit was filed against Mixpanel regarding the 2025 data breach.
• PostHog updated its Session Replay page with a new pricing matrix and a 5,000-recording free tier.
• Both competitors launched several new Google Ad creatives.