Breachesby GlyphMeta AI
Disclosed Jul 15, 2025Unverified
Meta AI bug let users view other people's private prompts and outputs
A researcher found Meta AI's servers did not check authorization when returning edited prompts, so changing an easily guessable ID exposed other users' private prompts and AI-generated responses; Meta fixed it on January 24, 2025 and paid a $10,000 bounty.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 15, 2025 |
| Attack | AI or model |
| Data exposed | Prompts and chatsOther |
| Sector | AI · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.