Early March 2026 brought a highly detailed user report on the Cursor community forum alleging that separate personal and work Cursor accounts—each with its own email but tied to the same GitHub account—led to personal usage analytics and a personal email address surfacing inside a team dashboard, and to BugBot behavior consistent with repository-to-organization mis-association. Anysphere representatives in-thread thanked the reporter, requested supporting screenshots, and stated the matter had been passed to security for review while confirming such data mixing should not occur.
Canonical record: Anysphere Cursor dashboard cross-account 2026 on BreachHistory.
Source: Cursor community forum