Every public data breach

47 disclosed this week · 26,367 on record

ai.type

Disclosed Dec 8, 201720,580,060 accountsUnverified

In December 2017, the virtual keyboard application ai.type was found to have left a huge amount of data publicly facing in an unsecured MongoDB instance . Discovered by researchers at The Kromtech Security Center, the 577GB data set included extensive personal information including over 20 million unique email addresses, social media profiles and address book contacts. The email addresses alone were provided to HIBP to enable impacted users to assess their exposure.

What is known

People affected20,580,060 (accounts in the leaked data, per Have I Been Pwned)
DisclosedDec 8, 2017
HappenedDec 5, 2017
AttackExposed data
Data exposedDates of birthEmailsLocationIP addressesNamesPhone numbers
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about ai.type