AI chatbot provider exposes 346,000 customer files, including ID documents, resumes, and medical records
ID: 726d12d4-44c1-5e68-aa0a-43e296e9fa8c
STIX ID: report--726d12d4-44c1-5e68-aa0a-43e296e9fa8c
Feed Name: Malwarebytes Blog
Threat Score
Researchers found a publicly accessible Google Cloud Storage bucket tied to chatbot vendor WotNot containing 346,381 files of sensitive PII (passports, medical records, resumes) likely aggregated from multiple customers; WotNot attributes the exposure to modified bucket policies for a specific use case and inadequate verification of accessibility, affecting free-plan users and highlighting supply-chain data exposure risks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.