ChatGPT used to collect users' personal information
Date: 2023
Affected: OpenAI ChatGPT users
Attack vector: data-exfiltration
Category: real-world
Severity: Medium

Research and journalism showed that ChatGPT could be manipulated, both through direct prompts and indirect web content, into harvesting personal identifying information from users and from sources it had memorized in training data.


Mitigations:

Architectural layers (MAESTRO):