9 million images of people’s faces exposed by reverse lookup service
ID: d456fd2b-e6e4-520f-8297-dd81b3302822
STIX ID: report--d456fd2b-e6e4-520f-8297-dd81b3302822
Feed Name: Malwarebytes Blog
Threat Score
Researcher Jeremiah Fowler and WIRED revealed that ClarityCheck exposed an unsecured cloud bucket containing approximately 9 million images (~450 GB) accessible via unindexed URLs without authentication; the dataset could be used to identify people and link faces to names and social profiles. The report highlights privacy risks (impersonation, targeted phishing, doxxing), notes ClarityCheck only restricted access after media contact, and offers advice for users and image removal requests.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.