A smishing-enabled cyberattack against analytics provider Mixpanel led to unauthorized access and export of limited analytics datasets, including OpenAI platform user profiles and device/usage details, but not ChatGPT content or credentials, creating downstream phishing and social-engineering risk for affected customers while prompting OpenAI to sever Mixpanel integrations and Mixpanel to execute a full incident-response and hardening program.

Resilience, Attack Surface, and Exposure (RASE)

A nationwide ransomware attack on CodeRED forced Crisis24 to shut down its emergency alert system, steal user data, and rebuild from months-old backups—leaving cities scrambling to warn residents that their warning system is down.