Your ChatGPT account may have been hacked as over 100,000 details stolen

Your ChatGPT account may have been hacked as over 100,000 details stolen
Amaar Chowdhury Updated on by

Video Gamer is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Prices subject to change. Learn more

Cybersecurity firm Group-IB recently “identified 101,134 stealer-infected devices with saved ChatGPT credentials” since June 2022. These were located with their Threat Intelligence platform, a new service developed by Group-IB which tracks illicitly traded account credentials across the dark-web.

According to Group-IB, Raccoon, Vidar, and Redline are responsible for the most ChatGPT account thefts, all of which are malware used to steal confidential digital data. Since AI’s rise in popularity over the course of late last year and early 2023, there’s been a huge uptick in the number of stolen accounts, with the pattern looking to increase further.

Furthermore, if you’re in India, Pakistan, or Brazil, you’re in the top three countries likely to have account details stolen and sold online.

Group-IB released a press-release (funnily enough written with the assistance of ChatGPT) in which Dmitry Shestakov, Group-IB’s Head of Threat Intelligence, said that “ChatGPT’s standard configuration retains all conversations, this could inadvertently offer a trove of sensitive intelligence to threat actors if they obtain account credentials.”

ChatGPT has actually had recent trouble with chat history privacy, wherein a bug was found which shared other accounts conversations with your own. It has since been patched, though the recent findings that over 100,000 accounts have been compromised will certainly worry some.

The AI-powered chatbot is widely used for both personal and commercial purposes, with it highly likely that sensitive data is being inputted. Wide-spread privacy concerns are a perfectly valid worry, with one of the main reasons that open-source and local LLMs are being promoted is the enhanced privacy.

It’s highly possible that your own account has been the victim of theft, and you can attempt to find this out through sites such as haveibeenpwned.com.

Infographic sourced from Group-IB’s Twitter.
Cover image generated with Midjourney, then edited in-house.