Will fraudulent OpenAI tenant phishing lead to documented corporate data breach by end of 2026?

Threat actors are creating fake OpenAI organizations/tenants that impersonate legitimate companies, inviting employees to join, and harvesting sensitive company information through chats and projects. Bleeping Computer reported the tactic; resolution requires documentation of at least one successful breach/data exfiltration attributed to this method.

Resolution Criteria

Public disclosure by a company, CISA alert, or credible threat intelligence report confirming that sensitive corporate data was exfiltrated via fraudulent OpenAI tenant invitation/impersonation attack.