OpenAI, the creator of ChatGPT, has revealed that some customers’ cost data could have been exposed earlier this week when it took ChatGPT offline owing to a bug.

What occurred?
The Microsoft-owned firm took ChatGPT offline as a result of a bug in an open-source library which allowed some customers to see titles from one other energetic consumer’s chat historical past.
“It was additionally attainable that the primary message of a newly-created dialog was seen in another person’s chat historical past if each customers have been energetic across the identical time,” stated the corporate.
Treatment
It reassured that the bug has been patched and ChatGPT service and its chat historical past function, except a number of hours of historical past, have been restored.
Nonetheless, upon additional probes OpenAI discovered that the identical bug could have brought about the unintentional visibility of “payment-related data of 1.2 per cent of the ChatGPT Plus subscribers who have been energetic throughout a particular nine-hour window”.
Clarification
“Within the hours earlier than we took ChatGPT offline, it was attainable for some customers to see one other energetic consumer’s first and final title, electronic mail deal with, cost deal with, the final 4 digits (solely) of a bank card quantity, and bank card expiration date.
Full bank card numbers weren’t uncovered at any time,” the corporate disclosed
Because of the bug, some subscription affirmation emails generated throughout that window have been despatched to the improper customers.
These emails contained the final 4 digits of one other customers’ bank card quantity, however full bank card numbers didn’t seem.
Do Not Panic!
“It’s attainable {that a} small variety of subscription affirmation emails might need been incorrectly addressed previous to March 20, though we’ve not confirmed any situations of this,” OpenAI additional stated.
The corporate said it has reached out to inform affected customers that their cost data could have been uncovered.
“We’re assured that there isn’t a ongoing danger to customers’ knowledge,” it added, apologising once more to customers and to your complete ChatGPT neighborhood.
The bug was found within the Redis consumer open-source library known as “redis-py”.