Compute Concentration - Footnote 19

Note: The date of the breach is listed as November 2025 in the claim, but the source specifies the breach occurred on November 9, 2025, and OpenAI was notified on November 25, 2025. The claim states user data was exported via SMS phishing of a third-party vendor, but the source indicates the attacker gained unauthorized access to Mixpanel's systems and exported a dataset. It does not specify SMS phishing. The claim mentions a supply-chain vulnerability in the AI ecosystem, but the source does not explicitly state this. It does mention that OpenAI is conducting additional and expanded security reviews across its vendor ecosystem and elevating security requirements for all partners and vendors.