Topic · AI data exposure
AI data exposure and leakage: incidents, guidance and rules
cisonews.ai has logged 10 publicly reported AI data-exposure incidents, with event dates from March 3, 2023 to October 27, 2026.
The most recent is "Warp discloses third-party vendor breach exposing AI agent logs, telemetry" (affected: Warp (agentic development environment)); each entry below links to its sourced write-up, followed by 3 explainers and 4 related rules and standards.
- 10
- Incidents
- 3
- Explainers
- 1
- Definitions
- 4
- Rules and standards
Collected from 18 pages on this site, newest addition October 31, 2026. Every fact sits on the linked page with its sources.
Incidents, newest first
Full log →- 2026-10-27Warp discloses third-party vendor breach exposing AI agent logs, telemetryAffected: Warp (agentic development environment)
- 2026-09-25OpenAI discloses its agents leaked 53 images from ChatGPT usersAffected: OpenAI / ChatGPT users
- 2025-08-05Shared ChatGPT conversations found indexed on Google search in 2025Affected: OpenAI ChatGPT
- 2025-07McHire AI hiring chatbot exposes McDonald's applicant dataAffected: McDonald's McHire hiring platform (built by Paradox.ai)
- 2025-06-04Asana's MCP server bug exposed data across customer organizationsAffected: Asana (Model Context Protocol server)
- 2025-01-30DeepSeek left ClickHouse databases holding chat logs open to the internetAffected: DeepSeek
- 2023-05-01Samsung restricts staff use of generative AI after sensitive data reached ChatGPTAffected: Samsung Electronics
- 2023-04OpenAI's internal messaging systems breached in 2023, disclosed in 2024Affected: OpenAI
- 2023-03-20ChatGPT outage and data exposure from a redis-py client bugAffected: ChatGPT
- 2023-03-03Meta's LLaMA model weights leak onto 4chan via BitTorrentAffected: Meta LLaMA
Rules and standards on this topic
Tracker →- 2026-10-21EU Council agrees position loosening GDPR rules for AI training dataEU · Digital Omnibus (GDPR/data protection amendments)
- 2026-10-21EU Council's Coreper approves GDPR carve-out for AI training dataEU · Digital Omnibus (GDPR amendments)
- 2026-02-25Connecticut's AG tells businesses: existing law already covers AIUS States · Connecticut Unfair Trade Practices Act, Connecticut Data Privacy Act, Connecticut Antitrust Act, Connecticut civil rights statutes
- 2024-12-20Italy's Garante fines OpenAI 15 million euros over ChatGPT data useEU · GDPR enforcement action (Italian Garante)
Questions about this topic
- How many AI data-exposure incidents has cisonews.ai logged?
- 10, with event dates from March 3, 2023 to October 27, 2026. The most recent is "Warp discloses third-party vendor breach exposing AI agent logs, telemetry".
- Which MITRE ATLAS techniques appear in these incidents?
- By this site's own tagging, the most frequent is LLM Data Leakage (AML.T0057, 1 incident).