OpenAI Hit by TanStack Supply Chain Attack

OpenAI disclosed that two of its employee devices were compromised as part of the TanStack supply chain attack. The security incident led to the exfiltration of credential material from internal source code repositories. The stolen data included code-signing certificates.

The disclosure did not specify when the breach occurred or how the attackers gained access. It also did not mention whether the stolen certificates have been used maliciously. The company has not commented further on the incident.

The TanStack attack is a known supply chain attack that has affected multiple technology companies. OpenAI's involvement highlights the ongoing risks to software development infrastructure. The incident underscores the importance of securing credential materials and code-signing keys.