logo

AI chat app leak exposes 300 million messages tied to 25 million users

ID: fc035617-1b59-5a35-845b-234d94bfbfe7

STIX ID: report--fc035617-1b59-5a35-845b-234d94bfbfe7

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2026-02-09

Date Updated: 2026-04-28

...
...

**Executive Summary:** A researcher discovered an exposed Firebase backend used by the Chat & Ask AI mobile app and related Codeway apps, reportedly leaking around 300 million messages and files from more than 25 million users due to publicly permissive Firebase security rules; the researcher published findings and a scanner that found the misconfiguration across many apps, and Codeway remediated the issue after responsible disclosure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.