Skip to content

Breaches that exposed prompts and chats

35 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
OpenAIResearchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsSep 178 days agoHackingUnverifiedUnknown
AnthropicInfostealer-stolen session cookies used to hijack Claude accountsAug 313 weeks agoHackingUnverifiedUnknown
AnthropicShared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverifiedUnknown
MetaEmployee keystroke and screen data collected to train AI was widely exposed inside MetaJun 53 months agoExposed dataUnknown
LovableAuthorization flaw exposed chat histories of public Lovable projectsApr 205 months agoExposed dataUnverifiedUnknown
My Lovely AIAI girlfriend platform breach exposed prompts and generated image linksApr 85 months agoHackingUnverified106Kacct
Cuties AINSFW AI companion platform data including prompts posted to hacking forumMar 315 months agoHackingUnverified144Kacct
Sears Home ServicesAI repair chatbot 'Samantha' left 3.7M chat logs and 1.4M call recordings exposedMar 176 months agoExposed dataUnverifiedUnknown
McKinsey & CompanyOffensive AI agent got read-write access to McKinsey's Lilli AI platform databaseMar 96 months agoAI or modelUnverifiedUnknown
KomikoAIAI comic generator breach linked user prompts to email addressesMar 26 months agoHackingUnverified1.1Macct
BonduAI plush toy's open web console exposed 50,000 children's chat logsJan 297 months agoExposed dataUnverifiedUnknown
CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersJan 297 months agoExposed dataUnverifiedUnknown
Malicious AI sidebar Chrome extensionsTwo Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chatsDec 30, 20258 months agoSupply chainUnverifiedUnknown
Urban Cyber SecurityFeatured VPN browser extension harvested AI chats of millions and sent them to data brokerDec 15, 20259 months agoInsiderUnverifiedUnknown
DreamXAI image generator database exposed over 1M mostly explicit images, some of minorsDec 4, 20259 months agoExposed dataUnverifiedUnknown
Secret DesiresErotic AI chatbot left nearly 2M user photos and videos in open storageNov 19, 202510 months agoExposed dataUnverifiedUnknown
Imagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesOct 9, 202511 months agoExposed dataUnverifiedUnknown
Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsSep 11, 20251 year agoExposed dataUnverifiedUnknown
xAIGrok website exposed system prompts for its AI personasAug 18, 20251 year agoAI or modelUnverifiedUnknown
ChatGPTShared ChatGPT conversations indexed by Google and other search enginesJul 31, 20251 year agoAI or modelUnverifiedUnknown
OpenAIShared ChatGPT conversations were indexed by Google and other search enginesJul 31, 20251 year agoExposed dataUnverifiedUnknown
MetaMeta AI bug let users view other people's private prompts and responsesJul 15, 20251 year agoExposed dataUnverifiedUnknown
Meta AIMeta AI bug let users view other people's private prompts and outputsJul 15, 20251 year agoAI or modelUnverifiedUnknown
MetaMeta AI app Discover feed surfaced users' personal chatbot conversationsJun 12, 20251 year agoExposed dataUnverifiedUnknown
GenNomisNudify AI image generator left 93,485 images and prompt logs in open databaseMar 31, 20251 year agoExposed dataUnverifiedUnknown
OmniGPTHacker leaked 34M lines of OmniGPT AI chat logs and 30,000 user contactsFeb 12, 20251 year agoHackingUnverifiedUnknown
DeepSeekUnauthenticated ClickHouse database exposed chat history and API secretsJan 29, 20251 year agoExposed dataUnverifiedUnknown
Character.AIConfiguration change exposed parts of some users' accounts and chats to othersDec 17, 20241 year agoExposed dataUnknown
Muah.AIAI girlfriend site breach exposed 1.9M emails tied to explicit promptsOct 8, 20241 year agoHackingUnverified1.9Macct
RabbitHardcoded API keys in Rabbit R1 code exposed users' AI assistant responsesJun 26, 20242 years agoExposed dataUnverifiedUnknown
ReplicateTenant isolation flaw could expose all Replicate customers' AI prompts and resultsMay 23, 20242 years agoExposed dataUnverifiedUnknown
OpenAIHijacked ChatGPT account exposed strangers' chats containing portal passwordsJan 30, 20242 years agoUnverifiedUnknown
GoogleShared Bard conversations were indexed in Google Search resultsSep 27, 20232 years agoExposed dataUnverifiedUnknown
SamsungStaff pasted sensitive internal data into ChatGPT, prompting a generative AI banMay 2, 20233 years agoInsiderUnverifiedUnknown
OpenAIChatGPT Redis bug exposed chat titles and Plus subscriber payment detailsMar 24, 20233 years agoExposed dataUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.