logo

Nearly 12,000 API keys and passwords found in AI training dataset

ID: de3164ff-6b39-52a2-9755-6f3b792fba13

STIX ID: report--de3164ff-6b39-52a2-9755-6f3b792fba13

Feed Name: Bleeping Computer

Threat Score
65/100

Date Published: 2025-03-02

Date Updated: 2026-03-27

Author: Ionut Ilascu

...
...

Researchers found nearly 12,000 valid secrets (API keys, passwords, webhooks) hardcoded across the Common Crawl dataset—most notably AWS root keys and ~1,500 MailChimp keys—exposing organizations to phishing, impersonation, and data-exfiltration risks; the team notified vendors and helped revoke/rotate many keys.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.