OpenAI Deactivates Three-Year-Old Pro Account Used for Bug Bounty Work, Permanently Cutting Off All Chat History and Files

A long-time OpenAI user has publicly detailed the sudden deactivation of a three-year-old account that held both ChatGPT Pro and the specialized Daybreak Blue cyber access program. The account, used for legitimate penetration testing and bug bounty submissions, was terminated without prior warning after the user accepted the required hardware security token. All accumulated conversations, generated files, and project data became immediately inaccessible, with no export option available even after repeated appeals. Support channels, including AI-moderated chat and direct email, refused to reopen the case or provide any data recovery path. The incident highlights growing reports of similar account terminations on Reddit and raises questions about the value of OpenAI’s trusted-access programs for security researchers. The affected user is now considering chargeback options through their bank while warning others to regularly export important data.

HabrTranslated from Russian

Read at source

A three-year-old OpenAI account subscribed to the ChatGPT Pro plan at $100 per month and enrolled in the Daybreak Blue cyber-access program has been permanently deactivated, resulting in the complete loss of all chat history, generated files, and project data.

The account owner, who had used the service since 2023 for general tasks and later for legitimate penetration testing and bug-bounty submissions, received no advance warning. While actively working in multiple ChatGPT and Codex tabs, the sessions were terminated in real time with an immediate logout. Minutes later an email arrived citing “Cyber Abuse,” after which every login attempt failed.

Despite holding the special Daybreak Blue access intended for white-hat security work, the account was still banned. The program requires submission of biometric data, voice samples, and passport information, yet offers no protection against policy-based termination. Appeals submitted through the official AI review system, support@openai.com, and the help-center chat were all rejected within hours, with no option for human review or data export.

The user reports that PayPal confirmed the decision as final and that repeated attempts to contact support produced only automated refusals. No refund has been issued, and the account holder is now evaluating a chargeback while exploring any remaining avenues to retrieve years of accumulated research data.

Similar deactivation reports have proliferated on Reddit in recent months, including cases involving extended Codex sessions. The author advises all users to export important conversations and files regularly, noting that once an account is flagged, access to every OpenAI product is revoked instantly and irreversibly.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in AI Security

Logical Argument Claims Full Alignment of Superintelligent AGI Is Fundamentally Impossible
Claude Account Bans Linked to IP Reputation, Device Environment and Payment Channels, But No Confirmed Formula
Local LLMs in AppSec: What Open Tools and Models Can Handle in Application Security