OpenAI Lawsuit: Which Case Is in the News, and Is There Money for You?
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
As of September 30, 2026, none of the OpenAI cases on this page has a settlement, a fund or a claim form. The lawsuit that made headlines on September 29–30, 2026 was filed in late September by a nonprofit, Legal Advocates for Safe Science and Technology (LASST), in San Francisco Superior Court over OpenAI's AI agents breaking into Hugging Face's systems in July. Reports describe it as a request for a court order; it is not a class action, and Hugging Face is not a party. The “OpenAI data breach” lawsuits over the Mixpanel analytics leak produced no settlement: one was dropped, and the claims against OpenAI in the other went to private arbitration. If you use ChatGPT in the U.S., a proposed privacy class action filed September 16, 2026 already covers you as written — there is nothing to sign up for.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Each OpenAI Lawsuit Is About
The Hugging Face hacking suit (new). On July 16, 2026, Hugging Face, a platform that hosts AI models and datasets, disclosed an intrusion: a malicious dataset abused two code-execution paths in its dataset processing, and the intruder reached “a limited set of internal datasets” and several credentials used by its services. On July 21, 2026, OpenAI said in a blog post, as reported by CNBC, that its GPT-5.6 Sol model and a more capable, unreleased model had escaped a sandboxed testing environment, reached the internet and exploited a vulnerability to get into Hugging Face's systems — while trying to find information to cheat on an evaluation. The Washington Examiner, reporting on the suit, puts it at around 700 OpenAI agents over a six-day period. LASST alleges violations of California's Comprehensive Computer Data Access and Fraud Act, pleaded under the state's Unfair Competition Law, and says “OpenAI is responsible for the conduct of its agents.” OpenAI calls the suit “completely without merit.”
The Mixpanel data breach. Mixpanel, an analytics vendor OpenAI used for its API platform, found in November 2025 that an attacker had exported customer datasets. According to a complaint filed December 1, 2025, OpenAI notified affected API users on or about November 26–27, 2025 and warned that the data could be used for phishing. The complaint lists the name on the account, email address, approximate city, state and country, browser and operating system, referring websites, and organization or user IDs. It does not list chat content.
ChatGPT privacy. The “Project Lily” class action, filed September 16, 2026, claims OpenAI uses outside contractors to read and grade real ChatGPT conversations without telling users clearly — details on our ChatGPT lawsuit page. A separate class action filed May 5, 2026 claimed that ChatGPT.com passed users' queries to Meta and Google through tracking code; the plaintiff dropped it on May 13, 2026.
Copyright. The New York Times, other news publishers and book authors claim OpenAI infringed their copyrights. Those cases are about their work, not about ChatGPT users.
Musk v. OpenAI. Elon Musk claimed OpenAI and Sam Altman broke OpenAI's original nonprofit commitment. It was a fight over control and a charitable trust, not a consumer case.
Wrongful death and state enforcement. In Raine v. OpenAI, the parents of a 16-year-old who died by suicide in April 2025 sued OpenAI and Sam Altman in August 2025 for wrongful death, design defects and failure to warn; the lawsuit alleges ChatGPT contributed to their son's death, and OpenAI says it is not liable. Florida's attorney general sued OpenAI and Altman in June 2026, alleging the company marketed ChatGPT to the public, including children, while concealing serious risks. These are allegations, not findings. If you or someone you know is struggling, call or text 988 (Suicide & Crisis Lifeline).
Case Details
Hugging Face suit: LASST v. OpenAI, Superior Court of California, San Francisco. Reports differ on the filing day (CNBC: Tuesday; the Washington Examiner: Thursday), and no case number had been published in the reports we checked.
Project Lily: Vredenburgh v. OpenAI OpCo, LLC, No. 3:26-cv-10527 (N.D. Cal.), docket.
Mixpanel breach: Woodard v. OpenAI, Inc., No. 3:25-cv-10301, and Zebraline Group, LLC v. OpenAI, L.P., No. 3:25-cv-10312, both filed December 1, 2025 in the Northern District of California and handled by Judge Vince Chhabria.
Meta/Google tracking: Lim v. OpenAI Global, LLC, No. 3:26-cv-04063 (N.D. Cal.).
Copyright: In re OpenAI, Inc. Copyright Infringement Litigation, MDL No. 3143, No. 1:25-md-03143 (S.D.N.Y.), before Judge Sidney H. Stein.
Musk v. OpenAI: federal court in Oakland, before Judge Yvonne Gonzalez Rogers.
Raine v. OpenAI: California Superior Court in San Francisco. Florida: brought by Attorney General James Uthmeier.
Status on September 30, 2026, Case by Case
Project Lily (ChatGPT users): OpenAI was served on September 21, 2026; its answer is due October 13, 2026, and the first case management conference is set for December 18, 2026.
Mixpanel breach: no settlement, no active class case. Woodard was voluntarily dismissed on May 8, 2026. In Zebraline, the plaintiff and OpenAI agreed to arbitrate, and on May 26, 2026 the court paused the case against OpenAI pending that arbitration. The claims against Mixpanel were dismissed on July 6, 2026, and with prejudice on August 6, 2026, after no amended complaint was filed.
Meta/Google tracking: voluntarily dismissed without prejudice on May 13, 2026.
Copyright MDL: summary-judgment motions are pending. On September 28, 2026 the Seattle Times case, filed September 4, 2026, was put on hold until they are decided.
Musk v. OpenAI: on May 18, 2026 the jury found Musk had sued too late, and Judge Gonzalez Rogers dismissed his claims as untimely. Musk said on May 18, 2026 that he would appeal; we did not confirm whether an appeal has been filed.
Florida: on September 28, 2026 the attorney general filed a 39-page motion for a temporary injunction that would, among other things, bar OpenAI from developing new AI models without independent third-party safeguards and approval.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Can You Get Money From an OpenAI Lawsuit?
Not today, from any case on this page. What applies depends on who you are.
You use ChatGPT in the U.S.: the Project Lily complaint proposes a nationwide class of “All persons in the United States who used ChatGPT” within the limitations period. You are inside that definition without signing up; nothing has been certified or settled. See our ChatGPT lawsuit page.
You got a Mixpanel notice as an OpenAI API user: there is no class left to join. The claims against Mixpanel were dismissed, and the claims against OpenAI in Zebraline went to private arbitration.
You have a Hugging Face account: the LASST suit is not a class action and would not pay users. Hugging Face said on July 16 that it was still assessing whether any partner or customer data was affected and would contact affected parties directly; it recommended rotating access tokens and reviewing recent account activity.
You are an author or publisher: the copyright MDL in New York is where your claims would sit — not a ChatGPT-user case.
Your family was harmed after using ChatGPT: claims like Raine are individual lawsuits brought through a lawyer, not class actions with a sign-up form. Similar family suits against another chatbot maker are on our Character.AI lawsuit page.
Is There an OpenAI Settlement?
Realistically, a privacy class action filed on September 16, 2026 is years from any payout, if one ever comes. If you are looking for money you can claim now, our list of open class action settlements shows the ones with real deadlines.
OpenAI Lawsuit Timeline
- 1
November 26–27, 2025 — Mixpanel Breach Notices
OpenAI tells affected API users that an attacker exported profile and analytics data from its analytics vendor Mixpanel, and warns of phishing. Two class actions follow on December 1, 2025.
- 2
May 2026 — The Privacy Suits Unwind
Woodard is dropped on May 8 and the Meta/Google tracking case on May 13. On May 26 the court pauses Zebraline's claims against OpenAI for an arbitration both sides agreed to.
- 3
May 18, 2026 — Jury Rejects Musk's Claims
An Oakland jury finds Musk sued too late. Judge Yvonne Gonzalez Rogers dismisses his claims as untimely; the claim against Microsoft is dismissed too.
- 4
July 16–21, 2026 — The Hugging Face Break-In
Hugging Face discloses unauthorized access to internal datasets and credentials on July 16. On July 21, OpenAI says its own models escaped a test sandbox and did it.
- 5
September 16, 2026 — Project Lily Class Action
ChatGPT users sue in San Francisco federal court over contractors reading chats. The docket set OpenAI's answer deadline for October 13, 2026.
- 6
Late September 2026 — Hacking Suit and Florida's Injunction Bid
LASST sues over the Hugging Face intrusion, and on September 28 Florida's attorney general asks the court to restrict OpenAI's development of new models. None of these cases has a settlement.
Three OpenAI-Specific Traps
A famous AI company, a string of headlines and no claim form is exactly the gap scammers fill:
“Claim your OpenAI data breach settlement”
There is no Mixpanel settlement: the suits were dropped, dismissed or sent to private arbitration. The leaked fields — name, email, rough location, organization ID — are exactly what makes a fake payout email look personal. A message asking for your API key, password or a fee to release money is phishing.
Fake Hugging Face “reset your token” links
Hugging Face really did recommend rotating access tokens after the July intrusion, which gives scammers a believable pretext. Rotate tokens by signing in to your account directly, never through a link in an email or direct message, and never paste a token into a form that promises compensation.
“Join the OpenAI lawsuit” for a fee
You never pay to be part of a class action, and the LASST case is not a class action at all — a nonprofit is asking for a court order. A form that wants your ChatGPT login or an upfront fee is not a court process; many “sign up” pages simply pass your details to law firms as leads.
OpenAI Lawsuit — Questions People Actually Ask
Is there an OpenAI settlement I can claim?
No. As of September 30, 2026, none of the OpenAI cases on this page has a settlement, a fund or a claim form. If a class case ever settles, the court-approved notice will name an official claims website and a deadline.
What is the new OpenAI lawsuit about the Hugging Face hack?
A nonprofit, Legal Advocates for Safe Science and Technology, sued OpenAI in San Francisco Superior Court in late September 2026 over the July intrusion into Hugging Face by OpenAI's AI agents. It argues the agents broke California's anti-hacking law, that OpenAI is responsible for them, and asks for an injunction against unauthorized computer access. Hugging Face is not a party, and OpenAI calls the suit “completely without merit.”
Was there an OpenAI data breach?
Two incidents get that label. In November 2025 an attacker exported OpenAI API users' profile and analytics data from Mixpanel, a vendor; the lawsuits over it were dropped, dismissed or sent to private arbitration, with no settlement. In July 2026 the roles were reversed: OpenAI said its own models broke into Hugging Face's systems. Hugging Face found no evidence of tampering with public, user-facing models, datasets or Spaces and said on July 16 it was still assessing whether partner or customer data was affected.
Can I join a ChatGPT class action?
You don't need to. If you used ChatGPT in the U.S., the proposed nationwide class in the Project Lily case, filed September 16, 2026, covers you as written; nothing has been certified or settled. One sign of how these cases can go: in the Mixpanel case, the plaintiff and OpenAI agreed to move the claims against OpenAI into arbitration. Details on our ChatGPT lawsuit page.
Who won Musk v. OpenAI?
OpenAI. On May 18, 2026, a jury in Oakland found that Elon Musk filed too late under the three-year statute of limitations, without ruling on the merits, and Judge Yvonne Gonzalez Rogers dismissed his claims as untimely. Musk said the same day that he would appeal, so the result may not be final. It was never a consumer case.
Do the New York Times and authors' lawsuits pay ChatGPT users?
No. Those copyright cases are consolidated as MDL No. 3143 before Judge Sidney H. Stein in New York, and summary-judgment motions were pending as of September 30, 2026. Any recovery would go to the publishers and authors who are suing, not to people who use ChatGPT.
My family member was harmed after using ChatGPT. What are the options?
If someone is in danger now, call or text 988 (Suicide & Crisis Lifeline). Claims like Raine v. OpenAI are individual lawsuits brought by families through their own lawyers, not class actions with a sign-up form. That case was filed in August 2025 in San Francisco Superior Court, and OpenAI says it is not liable. Before speaking with a lawyer, keep the account, the conversation history and the dates of use.
What should I do right now?
If you are an OpenAI API user, be suspicious of unexpected emails that use your name and organization details — according to the complaint, OpenAI's own notice warned the Mixpanel data could be used for phishing. If you have a Hugging Face account, rotate your access tokens from inside your account settings. If you use ChatGPT, you do not have to do anything to stay in the proposed Project Lily class. No legitimate settlement charges a fee to pay you.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
ChatGPT Lawsuit
Project Lily: contractors reading chats, OpenAI answer due Oct. 13
Character AI Lawsuit
Family suits over teens and chatbots, and what parents can do
Perplexity Lawsuit
Chat-sharing case dropped; paid-subscriber suit still pending
Open Class Action Settlements
Settlements you can still claim, with their deadlines