Harmful deploymentSerious1 sourceFirst seen
ChatGPT's cache served up strangers' chat titles. Nobody hacked it. Nobody needed to.
Ourtake
The cache didn't know whose data it was holding, and the server checking it didn't either.
What happened
On 20 March 2023 a bug in ChatGPT's Redis cache let some users see other users' chat titles. OpenAI says payment details of 1.2% of ChatGPT Plus subscribers active in a nine-hour window may have been visible to another user, though full card numbers were not exposed. The cause was a cancelled request in the open-source redis-py library, and OpenAI added ownership checks.