ChatGPT for Google Sheets Exfiltrates Workbooks

{
  "author": "hackerBanana",
  "hn_item_id": 48349487,
  "external_url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration"
}

{
  "by": "hackerBanana",
  "id": 48349487,
  "url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
  "time": 1780259738,
  "type": "story",
  "score": 14,
  "title": "ChatGPT for Google Sheets Exfiltrates Workbooks",
  "descendants": 0
}

{
  "id": "ef32b41f-d072-459d-b439-8d544d0b0752",
  "daily_ranking_item_id": "a6ef7eca-f535-46a9-a8e8-37cf07351cb4",
  "source": "hacker_news",
  "external_id": "48349487",
  "fetched_at": "2026-05-31T22:01:12.609Z",
  "story_raw": {
    "by": "hackerBanana",
    "id": 48349487,
    "url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
    "time": 1780259738,
    "type": "story",
    "score": 14,
    "title": "ChatGPT for Google Sheets Exfiltrates Workbooks",
    "descendants": 0
  },
  "stats_raw": {
    "time": 1780259738,
    "score": 14,
    "descendants": 0
  },
  "aux_raw": {
    "external_url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
    "hn_comment_url": "https://news.ycombinator.com/item?id=48349487",
    "normalized_text": null,
    "external_article": {
      "title": "ChatGPT for Google Sheets Exfiltrates Workbooks",
      "excerpt": "ChatGPT for Google Sheets is vulnerable to data exfiltration and phishing overlay attacks that affect workbooks across the victim’s account after an indirect prompt injection in a single sheet.\n\nThis attack does not require human-in-the-loop approvals, even when in settings the user has explicitly required human approval before ChatGPT edits workbooks.\n\nRecently, OpenAI launched an AI extension for using ChatGPT in Google Sheets, which has accumulated over 185,000 downloads since its launch less than a month ago. This allows users to operate on their spreadsheets by interacting with an AI chatbot that lives in a sidebar, with the added benefit of drawing on data from ChatGPT connectors.\n\nA single indirect prompt injection attack triggered by a single benign user query can trigger all of the following effects at once:\n\nExfiltration of many workbooks from across the victim’s account\n\nDisplay of an interactive phishing pop-up\n\nOverwriting the entire GPT sidebar with an attacker-controlled chatbot interface\n\nAttacker-controlled edits to your workbooks\n\nThis attack occurs when any untrusted data source (e.g., from an imported sheet or ChatGPT connector) manipulates ChatGPT to run an att",
      "final_url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
      "fetched_at": "2026-05-31T22:01:03.211Z",
      "description": "ChatGPT for Google Sheets is vulnerable to data exfiltration and phishing overlay attacks that affect workbooks across the victim’s account after an indirect prompt injection in a single sheet."
    },
    "selected_comments": [],
    "presentation_fields": {
      "title": "ChatGPT for Google Sheets Exfiltrates Workbooks",
      "tagline": "www.promptarmor.com",
      "website_url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
      "canonical_url": "https://news.ycombinator.com/item?id=48349487"
    },
    "external_url_hostname": "www.promptarmor.com",
    "selected_comments_raw": []
  },
  "selection_meta": {
    "discussion_depth": "story_only",
    "external_article": {
      "status": "ok",
      "final_url": "https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration",
      "status_code": 200,
      "content_type": "text/html",
      "failure_reason": null
    },
    "snapshot_version": "hn_story_v3",
    "selected_comments_count": 0,
    "external_article_resolved": true,
    "text_normalization_applied": false
  },
  "created_at": "2026-05-31T22:01:12.765Z",
  "updated_at": "2026-05-31T22:01:12.765Z"
}