Breachesby GlyphMeta
Disclosed Jul 15, 2025Unverified
Meta AI bug let users view other people's private prompts and responses
A researcher found that changing a numeric ID when editing a Meta AI prompt returned other users' private prompts and AI-generated responses. Meta fixed it on January 24, 2025, paid a $10,000 bounty and found no evidence of abuse.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 15, 2025 |
| Discovered | Dec 26, 2024 |
| Attack | Exposed data |
| Data exposed | Prompts and chats |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Meta
Employee keystroke and screen data collected to train AI was widely exposed inside MetaExposed data exposed employment records, prompts and chats, messages and training data. Reported to the California AG.Exposed dataTechUSJun 5Meta AI app Discover feed surfaced users' personal chatbot conversationsExposed data exposed prompts and chats, addresses, phone numbers, health records and location data.Exposed dataTechUSUnverifiedJun 12, 2025Meta's LLaMA research model weights leaked on 4chan a week after releaseTechUSUnverifiedMar 8, 2023
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.