Back News.Az

OpenAI says no user data exposed in security incident

News.Az • May 14, 2026

OpenAI said it found no evidence that user data was accessed following a security issue linked to a supply-chain attack involving the open-source TanStack npm library, News.Az reports, citing Reuters .

The company confirmed on Wednesday that it had investigated the incident after concerns emerged surrounding the compromised software package, which is widely used by developers in web applications and software projects.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenAI Faces Supply Chain Attack via TanStack npm Library OpenAI confirmed a security breach affecting two employee devices due to a supply chain attack linked to the TanStack npm library, part of a broader campaign called Mini Shai-Hulud. The attack involved the publication of 84 malicious package versions, which were executed via TanStack's legitimate release pipeline. OpenAI's investigation revealed that only limited credential material was exfiltrated from internal repositories, and no user data, production systems, or intellectual property were compromised. As a precaution, OpenAI is rotating its code-signing certificates, requiring macOS users to update their applications by June 12, 2026. Windows and iOS users are unaffected and do not need to take action. The incident highlights the growing risks associated with supply chain vulnerabilities in software development. 34 sources 58

Extracted Entities

OpenAI says no user data exposed in security incident

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Platforms (1)