// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-wedgDTG 0600Z
ColdRecon / Breach Radar / OpenAI
Breach Record

OpenAI

DISCLOSED 2026-05-14 · SUPPLY CHAIN

OpenAI confirmed that two employee devices were compromised in the TanStack supply chain attack, which affected hundreds of npm and PyPI packages. The breach prompted OpenAI to rotate code-signing certificates for its applications as a precaution.

The record

What we know

Disclosed
2026-05-14
Attack vector
Supply Chain
Sources

Cited reporting

↗ www.bleepingcomputer.com (2026-05-14) ↗ bleepingcomputer.com (2026-05-14)
Similar vector · recent

Other supply chain breaches on file

Melbourne International Film Festival · 2026-06-01 Charter Communications · 2026-05-31 Oncology Institute · 2026-05-29 Oncology Institute · 2026-05-28 Trump Mobile · 2026-05-28 Oncology Institute · 2026-05-27 The Oncology Institute · 2026-05-26 Oncology Institute · 2026-05-25

This page is the permanent ColdRecon entry for the OpenAI disclosure. It updates if new public reporting emerges. All tracked breaches →

OpenAI just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →