We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Advertising Disclosure

vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

ChatGPT Exposes User Data and Chat Histories

ChatGPT Exposes User Data and Chat Histories
Author Image Zane Kennedy
Zane Kennedy Published on 30th March 2023 Former Cybersecurity Researcher

A serious ChatGPT bug resulted in the exposure of user chat histories and the personal data of ChatGPT Plus subscribers on March 20th. The leaked data included identifiable user data and even partial payment information.

OpenAI CEO Sam Altman initially confirmed that the glitch briefly caused ChatGPT to share the conversation histories of some users. He blamed the data leak on "a bug in an open source library" and said a patch has already been released. Altman expressed his deep regret about the incident, concluding "we feel awful about this."

In a later announcement on March 24th, OpenAI stated: "Upon deeper investigation, we also discovered that the same bug may have caused the unintentional visibility of payment-related information of 1.2% of the ChatGPT Plus subscribers."

The exposed information included users' first and last names, email addresses, payment addresses, the last four digits of their credit card, and the card's expiration date. OpenAI confirmed that "full credit card numbers were not exposed at any time".

OpenAI concluded their announcement by mentioning that they have implemented several measures to enhance its systems. This includes thoroughly testing the aforementioned bug fix, adding redundant checks to ensure data accuracy, enhancing logging capabilities and conducting regular log examinations, and increasing the scale of the Redis cluster to reduce connection errors during high traffic.

The bug was discovered in the Redis open source library and allowed certain users to view descriptions of other users' conversations from the chat history sidebar. These descriptions could be clicked on to regenerate a response from the chatbot.

Redis is utilized by ChatGPT as a means of caching user information. This helps to eliminate the need for frequent database checks with each request, increasing the performance of the ChatGPT service.

OpenAI has reached out to ChatGPT Plus subscribers whose payment information may have been exposed to notify them of the potential leak.

About the Author

Zane was a Cybersecurity Researcher and Writer at vpnMentor. His extensive experience in the tech and cybersecurity industries provided readers with accurate and trustworthy news stories and articles. He aimed to help individuals protect themselves through informative content and awareness of cybersecurity's crucial role in today's digital landscape.

Please, comment on how to improve this article. Your feedback matters!

Leave a comment

Sorry, links are not allowed in this field!

Name should contain at least 3 letters

The field content should not exceed 80 letters

Sorry, links are not allowed in this field!

Please enter a valid email address