Codeway

Disclosed Feb 19, 2026Unverified

Android AI video app bucket exposed 8.27M media files including 2M private uploads

Cybernews found an unauthenticated Google Cloud Storage bucket behind the Android app Video AI Art Generator & Maker, developed by Turkey's Codeway, holding 8.27 million files, including over 1.57 million user-uploaded photos and 385,000 personal videos stored since the app's June 2023 launch. The bucket was later secured.

What is known

People affected	Not stated in the sources we have
Disclosed	Feb 19, 2026
Attack	Exposed data
Data exposed	BiometricsOther
Sector	AI · TR
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newstechdigest.tv

Android AI app exposes nearly 2m user files, including private videos

Newstechradar.com

Top Android AI photo and video editor exposes nearly two million user images and videos

Notices filed

TotalFeb 19

ResearchCount not stated

Other breaches at Codeway

Firebase misconfiguration exposed 300M messages from Chat & Ask AI usersExposed data exposed prompts and chats and messages.Exposed dataAITRUnverifiedJan 29

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Codeway