Mixpanel Security Incident: No Impact to Simpplr

Overview

On November 8, 2025, Mixpanel, which Simpplr users for employee engagement analytics, disclosed a security incident involving unauthorized access to a portion of their systems. During this event, an attacker exported a dataset containing limited customer-identifiable analytics information for a subset of Mixpanel customers.

This article summarizes what happened, how Simpplr is affected, and whether any action is required.

Impact to Simpplr

There is no impact to Simpplr or Simpplr customers.

Mixpanel has confirmed that:

• Simpplr was not included in the list of affected customers
• No Simpplr data stored in Mixpanel was accessed
• No Simpplr analytics events were exposed, exported, or tampered with

Our internal Security and Engineering teams have also verified:

• No unauthorized activity involving Simpplr’s Mixpanel integration
• No anomalies in event tracking, credentials, or access patterns

Customer Action Required

None.

There are no required configuration updates, resets, or security actions for Simpplr customers.

If Mixpanel or Salesforce provide new information that changes this status, we will notify affected customers immediately.

What Simpplr Has Done

As a precaution, Simpplr has:

• Reviewed access logs related to Mixpanel integrations
• Validated authentication and usage patterns
• Confirmed there is no connection to the impacted dataset
• Re-verified security posture and internal controls

We will continue monitoring all third-party incident updates closely.

Frequently Asked Questions (FAQ)

1. Is my Simpplr data at risk?

No. Mixpanel confirmed Simpplr was not impacted, and our internal verification aligns with that.

2. What type of data does Mixpanel store for Simpplr?

Simpplr uses Mixpanel for product analytics (e.g., feature usage patterns). No customer content or sensitive data (files, posts, users’ personal information, etc.) is stored in Mixpanel.

3. Will Simpplr send a customer communication?

We will proactively communicate only if customer interest rises significantly or if any new risk is identified. As of now, there is no impact and no need for customer-wide communication.

Need Help?

If you have questions or would like to speak with our Security or Support teams, please contact:

support@simpplr.com