Stolen AI Logins Expose Data at 80,000 Organizations

A new report finds more than 80,000 organizations had employee logins for AI services stolen, with ChatGPT accounts most frequently compromised. Researchers identified 482 major enterprises, many billion-dollar firms, whose corporate credentials were sold in infostealer logs. Stolen AI accounts offer more than password access: attackers gain session history, execution rights, and sometimes billing capabilities, posing a greater threat to enterprise security.

• Over 80,000 organizations affected by AI account theft
• Researchers identified 482 major enterprises with compromised logins
• 68% of affected firms are billion-dollar organizations
• ChatGPT accounts made up 90% of breach records
• Stolen sessions bypass MFA and expose sensitive conversation history