A hacker infiltrated OpenAI's internal messaging systems early last year and obtained details about its technology, according to The New York Times, which cited anonymous sources. OpenAI chose not to disclose the breach or notify law enforcement since no customer or partner information was compromised, the sources stated. Although the hacker accessed some employee discussions, they did not reach the systems used for developing artificial intelligence. In related news, OpenAI recently updated its ChatGPT app for Apple's Mac operating system to address a security flaw, The Verge reports. Previously, conversations were stored in plain text until Friday.
In the U.S., all 50 states have data breach notification laws requiring businesses to notify affected individuals if their personal data is compromised. The specifics of these laws, such as the timeline and method of notification, vary by state. Certain federal laws, like the Health Insurance Portability and Accountability Act (HIPAA), require notification if protected health information is breached.
Regulations such as the Gramm-Leach-Bliley Act (GLBA) require financial institutions to notify customers of data breaches involving non-public personal information.
The attorneys at Outside Legal Counsel LLP will have extensive experience with advising businesses that have been hacked. Reach out to us to schedule a consultation.
This is not legal advice and is attorney advertising.
Disclaimer: Nothing on this website is or should be construed as legal advice. An attorney-client relationship does not exist with our firm unless a signed retainer agreement is executed, and we do not offer legal advice through this site or any of the content located on it. For legal advice for your particular circumstances, please contact us directly.
