Over the past year, a Singaporean cybersecurity firm has discovered a major data breach involving more than 100,000 login credentials for the popular AI chatbot, ChatGPT. The compromised logins were traded on dark web marketplaces between June 2022 and May 2023, according to a recent blog post by Group-IB.
Stolen login information was found in the logs of “info-stealing malware,” with a peak of nearly 27,000 ChatGPT-related credentials appearing on online black markets in May 2023.
The Asia-Pacific region accounted for around 40% of compromised logins, while India had the highest number of leaked credentials with over 12,500. The United States ranked sixth with nearly 3,000 leaked logins, and France claimed the top position in Europe.
Group-IB has observed a rise in the number of employees utilizing ChatGPT for work purposes. However, they caution that this usage may lead to the potential exposure of sensitive company information. As user queries and chat history are stored by default, unauthorized users could gain access to confidential data.
