Security breach at AI aggregator exposes over 18 million files, including some very embarrassing chat records

Researchers found 22.7TB of exposed data from AI aggregator 302.ai, including chat logs and personal information Leaked records contained user prompts, AI responses, metadata, and sensitive corporate documents Incident highlights the risks of sharing confidential data with third-party AI platforms and services Security experts who were screaming “don’t share sensitive data with public AI” from the rooftops have been properly vindicated by an AI aggregator called 302.ai.

Researchers from Cybernews claim this company leaked terabytes of sensitive user and corporate data, including personally identifiable information (PII), confidential business documents, and a lot more.

Every hacker's dream An AI aggregator is a platform that brings together multiple AI models and tools in one place.

Users then get to switch between them without having to visit each provider separately.

For example, an AI aggregator might let a user start with Chat-GPT and switch to Claude with a push of a button, all through a single interface and a single subscription or API.

Although there are different use cases for AI aggregators, the number one is being able to compare the responses quickly and easily.

302.ai was launched six years ago by a company called Univerads Technology Limited, based in Hong Kong.

Cybernews says it kept an unencrypted, non-password-protected, publicly available Azure storage bucket that contained 17.6 million files.

The entire archive was 22.72TB heavy, most of which went on image files (almost 9TB).

Video took up 7.7TB, while audio took up 5.6TB.

The rest - around 500GB, were user chat logs.

Totaling more than 144,000, these logs were stored in .json files and exposed plenty of personal information, including user prompts, replies from the AI bot, which model was used, how much it cost in tokens, timestamps, and other metadata.

Users also seem to have provided plenty of data themselves, including their names, birth dates, genders, postal addresses, and other contact information.

Some of the information leaked this way was quite embarrassing, too.