Security breach at AI aggregator exposes more than 18 million files, including some very embarrassing chat logs
follow us
Add us as a preferred source on Google
- Researchers found 22.7 TB of exposed data from AI aggregator 302.ai, including chat logs and personal information.
- The leaked logs contained user prompts, AI responses, metadata, and confidential corporate documents.
- Incident highlights risks of sharing sensitive data with third-party AI platforms and services
Security experts shouting from the rooftops “do not share sensitive data with public AI” have been adequately justified by an AI aggregator called 302.ai.
Researchers of cyber news Claim that this company leaked terabytes of sensitive corporate and user data, including personally identifiable information (PII), sensitive business documents, and much more.
Every hacker’s dream
An AI aggregator is a platform that brings together multiple AI models and tools in one place. Users can then switch between them without having to visit each provider separately.
Latest videos ofTechnologyRadar
For example, an AI aggregator could allow a user to start with Chat-GPT and switch to Claude with the push of a button, all through a single interface and a single subscription or API.
Although there are different use cases for AI aggregators, number one is being able to compare responses quickly and easily.
302.ai was launched six years ago by a company called Univerads Technology Limited, based in Hong Kong.
cyber news says it kept a publicly available, unencrypted, unpassword-protected Azure storage bucket containing 17.6 million files. The entire file weighed 22.72TB, most of which was in image files (almost 9TB). Video took up 7.7TB, while audio took up 5.6TB. The rest, around 500 GB, were user chat logs.
These logs, numbering more than 144,000, were stored in .json files and exposed a lot of personal information, including user prompts, responses from the AI robot, what model was used, how much it cost in tokens, timestamps, and other metadata. Users also appear to have provided a lot of data themselves, including their names, dates of birth, genders, postal addresses and other contact information.
Some of the information leaked this way was also quite embarrassing. “What we found was that some companies were using the service for business tasks. For example, we found multiple chat logs from a customer support chatbot owned by a prominent sex doll manufacturer,” the team wrote.
This type of private data, even intimate, is a gold mine for cybercriminals. They can use it to create highly personalized and personalized phishing emails, knowing exactly what company to impersonate, what kind of context to mention, and how to word the decoy email to get the victim to react. That reaction often ends in business email breaches, phishing, or ransomware infections.
Database crashes
cyber news‘The researchers contacted Univerads Technology, but did not receive a response. Meanwhile, the company locked the database and no longer leaks sensitive files.
However, key questions remain unanswered: Does Univerads maintain this database or was the work outsourced to a third party? When did the company first start collecting this data? How long was the file left unprotected? cyber news I found it in early August 2026 and saw it blocked a month later. Did anyone else find it before cyber news team did it? Is there any indication that the files were copied or viewed by a third party? Is there any evidence of misuse or data leaks to the dark web?
These questions are very unlikely to be answered. Given the company’s quick response and closure of the database, it is safe to assume that there were no malicious intentions and that the breach is purely inadvertent.
Unfortunately, accidental data breaches like this are very common. Many organizations don’t know, or simply forget, that it is their responsibility to protect the data they generate and store in the cloud. As a result, new reports of large leaks emerge almost every week, some of which affect entire populations in certain countries, such as Brazil.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds.
Post Comment