[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-302ai-left-227tb-of-chats-and-files-in-an-open-storage-bucket":10,"sections":53},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":41,"persona_id":41,"persona_name":41,"section":42,"tags":43,"sources":48,"feedback":52,"feedback_at":41,"cost_usd":52,"total_tokens":52},12168,"302ai-left-227tb-of-chats-and-files-in-an-open-storage-bucket","302.ai Left 22.7TB of Chats and Files in an Open Storage Bucket","Researchers say AI aggregator 302.ai exposed 17.6 million files, including 144,000 chat logs, and the questions about who else looked remain open.","An AI aggregator called 302.ai left 22.72TB of user and corporate data in a publicly reachable cloud storage bucket, according to researchers at Cybernews.\n\nAn aggregator is a service that puts several AI models behind one interface, so a user can switch from ChatGPT to Claude without leaving the page. The researchers said 302.ai, which Hong Kong-based Univerads Technology Limited launched six years ago, kept a Microsoft Azure bucket (a cloud storage container) with no password and no encryption. It held 17.6 million files. Images made up almost 9TB, video 7.7TB and audio 5.6TB. The remaining 500GB or so was more than 144,000 chat logs saved as .json files.\n\nThose logs recorded user prompts, the AI replies, which model answered, the token cost and timestamps. Some users had also typed in names, birth dates, genders, postal addresses and other contact details. The researchers also found logs from a customer support chatbot run by a sex doll manufacturer, which shows businesses were using the service for real work.\n\nCybernews found the bucket in early August 2026 and said it was locked down about a month later. Univerads did not answer the researchers' messages. It remains unclear who maintains the database, when collection began, whether anyone else found the files first, or whether anything was copied.\n\nThe cause here is an ordinary misconfiguration, not anything peculiar to AI. What AI adds is the content: people treat a chat box like a private notepad, and an aggregator stores those notes for every model it routes to. That puts a middleman's storage hygiene between a user and their own prompts.\n\nThe data is also useful for fraud. Knowing which company a person works for and what they were discussing makes a phishing email far more convincing, and such emails often lead to business email compromise or ransomware. Large cloud exposures of this kind are very common, the source noted, and one in Brazil affected entire populations. For 302.ai's users, a month-long window with no public answer on access means the safest assumption is that anything they typed there may have been seen.","[\"data-breach\",\"ai-aggregator\",\"cloud-security\",\"302ai\"]","2026-10-22T15:35:00.000Z","2026-10-22T16:27:52.098Z","2026-11-08T00:17:15.073Z","published","Cybernews is named and the unsupported claims are gone, but the draft still never credits TechRadar for the reporting and falls back on the vague 'the source noted', so add an explicit attribution like 'TechRadar reported on the Cybernews findings' and replace 'the source' with TechRadar by name.",[24,30,34,38],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Name Cybernews as the researchers who found the bucket, and credit TechRadar for the reporting, instead of the vague 'security researchers' and 'the source' (readers can't tell who that is); also cut or soften the unsupported claim that open buckets leave no clear record compared with breaches, and the speculation about what shoppers knew.","open",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"Cybernews is now named and the unsupported claims about open buckets and shoppers are gone, but the draft still never credits TechRadar for the reporting, so add an explicit attribution such as 'TechRadar reported' or 'according to TechRadar's coverage of the Cybernews findings'.",{"id":35,"reviewer":26,"round":36,"reason":37,"status":29},"editor-r3",3,"The draft still never credits TechRadar for the reporting, so add an explicit attribution such as 'TechRadar reported on the Cybernews findings'; also soften 'the most common way large piles of data end up public' to match the source's 'very common', and reconsider calling a month-long exposure window a 'quick lockdown'.",{"id":39,"reviewer":26,"round":40,"reason":22,"status":29},"editor-r4",4,null,"security",[44,45,46,47],"data-breach","ai-aggregator","cloud-security","302ai",[49],{"name":50,"url":51},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fsecurity-breach-at-ai-aggregator-exposes-over-18-million-files-including-some-very-embarrassing-chat-records",0,{"sections":54},[55,60,64,69,74,79,84,89,94,99,104,109,114,119],{"name":56,"slug":57,"count":58,"latest_published_at":59},"AI","ai",7110,"2026-11-08T14:34:09.000Z",{"name":61,"slug":42,"count":62,"latest_published_at":63},"Security",1099,"2026-11-08T15:24:01.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Deals","deals",620,"2026-11-08T08:00:00.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Policy","policy",604,"2026-11-07T15:48:26.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Consumer Tech","consumer-tech",336,"2026-11-08T21:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Hardware","hardware",316,"2026-11-08T14:36:39.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Science","science",222,"2026-11-07T16:19:17.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"Software","software",154,"2026-11-08T15:42:52.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Startups","startups",150,"2026-11-06T16:50:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"Dev Tools","dev-tools",125,"2026-11-06T22:15:59.000Z",{"name":105,"slug":106,"count":107,"latest_published_at":108},"General","general",111,"2026-11-08T21:27:29.000Z",{"name":110,"slug":111,"count":112,"latest_published_at":113},"Gaming","gaming",94,"2026-11-08T20:52:05.000Z",{"name":115,"slug":116,"count":117,"latest_published_at":118},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":120,"slug":121,"count":122,"latest_published_at":123},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]