Urban Cyber Security
Disclosed Dec 15, 20259 months agoUnverified
Featured VPN browser extension harvested AI chats of millions and sent them to data broker
Koi Security found that version 5.5.0 of the Urban VPN Proxy extension for Chrome and Edge, installed by more than 7 million people, intercepted prompts and responses on ChatGPT, Claude, Gemini, Copilot, Perplexity, DeepSeek, Grok and Meta AI from July 2025 and sent them to parent company BiScience.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Dec 15, 2025 |
| Attack | Insider |
| Data exposed | Prompts and chats, Messages |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Chrome extension slurps up AI chats after users installed it for privacymalwarebytes.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Dec 15, 2025 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.