80,000+ Firms Hit by Stolen AI Logins in Supply-Chain Attack Surge

Over 80,000 organizations have had AI service logins stolen, with 68% being billion-dollar enterprises. SOCRadar’s report reveals that ChatGPT dominates the dataset, exposing corporate data and systems. Stolen AI logins are worse than traditional credentials, granting access to conversation histories, execution engines, and billable resources without password prompts. The report highlights that stolen session cookies bypass MFA, and API keys are resold or used for unauthorized access. The article advises CISOs to implement SSO, scope API keys, monitor session reuse, and audit shadow accounts to mitigate risks.