this post was submitted on 07 Feb 2025
92 points (100.0% liked)

Cybersecurity

75 readers
42 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Rules

Community Rules

founded 2 years ago
MODERATORS
 

A Russian threat actor has posted for sale the alleged login account credentials for 20 million OpenAI ChatGPT accounts.

#cybersecurity #ChatGPT #OpenAI #DataSecurity #dataprivacy #cybercrime

https://cnews.link/chatgpt-20-million-openai-account-logins-for-sale-breachforums-3/

top 8 comments
sorted by: hot top controversial new old
[–] skeezix 16 points 3 weeks ago (3 children)

We can't call them hackers any more? They're "threat actors" now?

[–] bahbah23 11 points 3 weeks ago

"Threat actor" is more formal. Hacker is a more colloquial term with historically ambiguous meaning.

[–] Blue_Morpho 4 points 3 weeks ago

I don't even understand the phrase? Are they a threat or are they only acting? It's a Jerry Seinfeld routine.

[–] [email protected] 3 points 3 weeks ago (1 children)

Because they never actually hack anything. Either they fish someone's password, find an email and password combo someone reusedfrom a different site, or someone left root with ssh access and a default password.

[–] Ziglin 1 points 3 weeks ago

They could also have found a vulnerability in the database system, though it is of course unlikely.

[–] bananabenana 5 points 3 weeks ago

Oh no, someone may see the shitty code chatgpt generates for me

[–] [email protected] 2 points 3 weeks ago (1 children)
[–] [email protected] 2 points 3 weeks ago

Why wouldn't it be? Leaks happen every month, and everyone has been listed in at least a few. It's not really a problem, so long as you use a unique password for every service, and change your password when notified you've been in a breach.