Codeway
Disclosed Jan 29, 20267 months agoUnverified
Firebase misconfiguration exposed 300M messages from Chat & Ask AI users
A researcher found Chat & Ask AI, a popular AI chat wrapper app from Codeway, had a Firebase misconfiguration letting anyone access its backend; he said it held about 300 million messages from more than 25 million users, including full chat histories and model settings. Codeway reportedly fixed the issue across its apps within hours.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 29, 2026 |
| Attack | Exposed data |
| Data exposed | Prompts and chats, Messages |
| Sector | AI · TR |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Massive AI Chat App Leaked Millions of Users Private Conversations404media.co · News | News |
| AI chat app leak exposes 300 million messages tied to 25 million usersmalwarebytes.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 29 |
Other breaches at Codeway
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Android AI video app bucket exposed 8.27M media files including 2M private uploadsFeb 197 months agoExposed dataUnverified | Feb 197 months ago | Exposed data | AI | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.