Codeway

Disclosed Jan 29, 2026Unverified

Firebase misconfiguration exposed 300M messages from Chat & Ask AI users

A researcher found Chat & Ask AI, a popular AI chat wrapper app from Codeway, had a Firebase misconfiguration letting anyone access its backend; he said it held about 300 million messages from more than 25 million users, including full chat histories and model settings. Codeway reportedly fixed the issue across its apps within hours.

What is known

People affected	Not stated in the sources we have
Disclosed	Jan 29, 2026
Attack	Exposed data
Data exposed	Prompts and chatsMessages
Sector	AI · TR
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

News404media.co

Massive AI Chat App Leaked Millions of Users Private Conversations

Newsmalwarebytes.com

AI chat app leak exposes 300 million messages tied to 25 million users

Notices filed

TotalJan 29

ResearchCount not stated

Other breaches at Codeway

Android AI video app bucket exposed 8.27M media files including 2M private uploadsExposed data exposed biometric data.Exposed dataAITRUnverifiedFeb 19

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Codeway