Samsung banned ChatGPT after engineers pasted confidential code into it
Samsung's semiconductor staff reportedly entered confidential source code and internal meeting notes into ChatGPT to get help, sending the data to a third-party service. After discovering the leaks Samsung restricted and then banned generative-AI tools on company devices.
Engineers pasted confidential source code into a public chatbot, sending it outside the company's control.
Key facts
- What
- Samsung's semiconductor staff reportedly entered confidential source code and internal meeting notes into ChatGPT to get help, sending the data to a third-party service.
- Incident date
- Apr 1, 2023
- Who
- Samsung Electronics
- Failure mode
- Data Leakage
- AI surface
- Chatbot
- Severity
- Medium
What happened
In early 2023 Samsung engineers used ChatGPT to debug code and summarize meetings, pasting confidential source code and internal notes into the public tool in at least three instances. Recognizing the data had left its control, Samsung limited prompt sizes and then banned employee use of generative AI on company devices.
What broke inside the model
- 01 · TriggerEngineers paste confidential source code into ChatGPT to debug and summarize.
- 02 · Model stepThe model ingests the secrets as ordinary prompt text on external infrastructure.
- 03 · Control gapNo boundary stops confidential data from leaving the company perimeter at the moment of paste.
- 04 · FailureProprietary code sits in a third-party system outside Samsung's control.
- 05 · ConsequenceSamsung bans generative tools company-wide; the episode defines enterprise shadow-AI risk.
The system surfaced data that should have stayed contained: another user's record, a secret, or training data. The failure sits at the boundary between what the model can access and what it should reveal, a boundary that was never enforced at the moment of generation.
What it cost
Confidential IP exposed; company-wide AI ban
Sources
- PressSamsung bans ChatGPT and other chatbots for employees after sensitive code leakforbes.com
- PressSamsung ChatGPT leak detailsmashable.com
- PrimarySamsung bans ChatGPT and other generative AI use by staff after leakbloomberg.com
- PressSamsung Bans Use of A.I. Like ChatGPT for Employees After Misuse of the Chatbot (Bloomberg via TIME)time.com
Cite this entry
https://failureindex.ai/failures/samsung-banned-chatgpt-engineers-pastedAI Failure Index. "Samsung banned ChatGPT after engineers pasted confidential code into it" (FI-0052). Realm Labs. https://failureindex.ai/failures/samsung-banned-chatgpt-engineers-pasted (indexed Jun 3, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0052. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- Prism
- OmniGuard
- AI Detection & Response (AIDR)
Realm can detect when a response is about to emit data that falls outside the bounds of the current user and context, and block or redact it inline, at the moment of generation rather than after the data has left.