Your ChatGPT Conversations Might Not Be Private

# Your ChatGPT Conversations Might Not Be Private

This morning, a long-time ChatGPT subscriber woke up to push notifications about conversations they never had.

When they opened the app, they found multiple chats about prenatal vitamins - market research conversations that clearly belonged to someone else. The chats appeared between 12:30 AM and 6:30 AM, and each one started with the phrase "do not update memories."

Here's the scary part: This person did everything right.

They had two-factor authentication enabled. They changed their password. They logged out of all devices. They deleted their API key. And the conversations kept appearing.

OpenAI support's response? "We didn't find any suspicious logins." They insisted it must be browser hijacking, even though there were no other signs of compromise and the issue appeared on both web and mobile.

What This Means for You

If you've used ChatGPT for anything sensitive - work projects, personal questions, health concerns, financial planning - those conversations might not be as private as you thought.

This isn't speculation. This is a real user, with screenshots and detailed documentation, watching someone else's conversations appear in real-time in their account. When they refresh, the new chats disappear from history, but they can still click and read them while the tab is open.

The Pattern That's Concerning

The leaked conversations all follow a specific pattern. They're clearly market research for an online vitamin business. Every chat starts with "do not update memories" - suggesting whoever is conducting the research knows enough about ChatGPT to try to avoid having their queries saved.

What's particularly worrying is OpenAI's response. Instead of acknowledging a potential bug on their end, they're defaulting to "must be user error" even when the evidence suggests otherwise.

What You Can Do Right Now

Stop storing sensitive information in ChatGPT conversations. If you've already shared private details, there's no way to guarantee they're secure.

Enable two-factor authentication if you haven't already. While it didn't prevent this leak, it's still basic security hygiene.

Review your conversation history regularly. If you see chats you don't recognize, document them immediately with screenshots before they disappear.

Don't trust the memory feature with private details. If ChatGPT is having cross-account leaks, the memory system could be equally vulnerable.

Consider using ChatGPT in incognito mode for sensitive queries, though this won't help if the leak is on OpenAI's infrastructure side.

The Bigger Picture

This incident highlights something most people don't think about: When you use AI tools, you're trusting the company with everything you type. There's no local encryption. Your conversations live on their servers. And if those servers have bugs - or if their support team isn't equipped to recognize them - your private information could end up visible to other users.

ChatGPT has over 200 million users. Even if this is a rare bug, "rare" at that scale still means thousands of people could be affected.

The fact that OpenAI support is denying the possibility rather than investigating it makes the situation worse. Users deserve transparency when privacy breaches occur, not dismissive responses about browser security.

What We Don't Know Yet

Is this affecting other users? OpenAI says they haven't seen similar reports, but that doesn't mean they aren't happening. Most people wouldn't notice someone else's chats appearing for a few seconds before disappearing on refresh.

How long has this been happening? The user noticed it today, but if chats can appear and disappear, how many previous leaks went undetected?

What caused it? Is this a database indexing issue? A session management bug? A cache problem? Without transparency from OpenAI, we're left guessing.

The Bottom Line

AI tools are powerful, but they're also new infrastructure built fast. Bugs happen. The question is how companies respond when users report serious privacy issues.

Right now, ChatGPT's response isn't reassuring.

If you use AI for work, assume your employer might someday request access to those logs. If you use it for personal matters, assume there's a non-zero chance of cross-contamination like this.

The convenience of AI assistance comes with privacy risks that most people don't think about until something goes wrong.

Today, something went wrong.

---

Source: Original Reddit post from r/ChatGPT, February 26, 2026 - https://www.reddit.com/r/ChatGPT/comments/1remhah/chatgpt_leaking_user_chats_across_accounts/