The Most Dangerous Data Leak via AI Apps on Google Play

Millions of Images and Data Exposed: An Investigation Reveals the Most Dangerous Data Leak via AI Apps on Google Play
A recent investigation has revealed that some AI applications available on the Google Play Store may pose a real threat to user privacy, as a number of them were found to contain security vulnerabilities that led to the leaking of massive amounts of personal data and private files.
According to an investigation conducted by Cybernews, a cybersecurity-specialized website, many untrusted AI applications on Android have exposed billions of records and sensitive user information, particularly applications promoted as tools for photo and video editing or identity verification.
Among the most prominent cases documented by the investigation is an application called Video AI Art Generator & Maker, where a misconfiguration in one of Google's cloud storage containers led to the exposure of user files. This resulted in the leaking of approximately 1.5 million images and more than 385,000 video clips, in addition to millions of AI-generated files.
According to the researchers, the total size of media exposed through this open container exceeded 12 terabytes of data, at a time when the application had been downloaded more than 500,000 times.
The investigation also uncovered another application known as IDMerit, which leaked data related to identity verification processes known as "Know Your Customer" (KYC). The leaked data included sensitive information belonging to users in 25 countries, the majority of them in the United States, such as:
-
Full names
-
Addresses
-
Dates of birth
-
ID card images
-
Contact information
The total size of this data reached approximately one full terabyte.
The researchers noted that they notified the developers of both applications about the issue, and the security vulnerabilities were subsequently patched. Nevertheless, cybersecurity experts warned that the weak protection standards found in a large number of AI applications pose a widespread threat to user privacy.
Among the dangerous practices also discovered by the researchers is what is known as "hardcoded secrets," an insecure method in which developers embed sensitive information directly inside the application's source code, such as:
-
API keys
-
Passwords
-
Encryption keys
According to Cybernews' analysis, 72% of AI applications examined on the Google Play Store contained similar security vulnerabilities, raising significant concerns about the safety of user data when using these applications.
For all that is new, you should follow Arabic websites and specialized blogs, alongside what is offered by Egyptian stores and Kuwaiti stores and vitamin stores and foreign websites, while relying on Mashhor website for social media services.





