Technology
Millions of AI chat messages exposed in app data leak
NEWYou can now listen to Fox News articles!
A popular mobile app called Chat & Ask AI has more than 50 million users across the Google Play Store and Apple App Store. Now, an independent security researcher says the app exposed hundreds of millions of private chatbot conversations online.
The exposed messages reportedly included deeply personal and disturbing requests. Users asked questions like how to painlessly kill themselves, how to write suicide notes, how to make meth and how to hack other apps.
These were not harmless prompts. They were full chat histories tied to real users.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
HOW TECH IS BEING USED IN NANCY GUTHRIE DISAPPEARANCE INVESTIGATION
Security researchers say Chat & Ask AI exposed hundreds of millions of private chatbot messages, including complete conversation histories tied to real users. (Neil Godwin/Getty Images)
What exactly was exposed
The issue was discovered by a security researcher who goes by Harry. He found that Chat & Ask AI had a misconfigured backend using Google Firebase, a popular mobile app development platform. Because of that misconfiguration, it was easy for outsiders to gain authenticated access to the app’s database. Harry says he was able to access roughly 300 million messages tied to more than 25 million users. He analyzed a smaller sample of about 60,000 users and more than one million messages to confirm the scope.
The exposed data reportedly included:
- Full chat histories with the AI
- Timestamps for each conversation
- The custom name users gave the chatbot
- How users configured the AI model
- Which AI model was selected
That matters because many users treat AI chats like private journals, therapists or brainstorming partners.
How this AI app stores so much sensitive user data
Chat & Ask AI is not a standalone artificial intelligence model. It acts as a wrapper that lets users talk to large language models built by bigger companies. Users could choose between models from OpenAI, Anthropic and Google, including ChatGPT, Claude and Gemini. While those companies operate the underlying models, Chat & Ask AI handles the storage. That is where things went wrong. Cybersecurity experts say this type of Firebase misconfiguration is a well-known weakness. It is also easy to find if someone knows what to look for.
We reached out to Codeway, which publishes the Chat & Ask AI app, for comment, but did not receive a response before publication.
149 MILLION PASSWORDS EXPOSED IN MASSIVE CREDENTIAL LEAK
The exposed database reportedly included timestamps, model settings and the names users gave their chatbots, revealing far more than isolated prompts. (Elisa Schu/Getty Images)
Why this matters to everyday users
Many people assume their chats with AI tools are private. They type things they would never post publicly or even say out loud. When an app stores that data insecurely, it becomes a gold mine for attackers. Even without names attached, chat histories can reveal mental health struggles, illegal behavior, work secrets and personal relationships. Once exposed, that data can be copied, scraped and shared forever.
YOUR PHONE SHARES DATA AT NIGHT: HERE’S HOW TO STOP IT
Because the app handled data storage itself, a simple Firebase misconfiguration made sensitive AI chats accessible to outsiders, according to the researcher. (Edward Berthelot/Getty)
Ways to stay safe when using AI apps
You do not need to stop using AI tools to protect yourself. A few informed choices can lower your risk while still letting you use these apps when they are helpful.
1) Be mindful of sensitive topics
AI chats can feel private, especially when you are stressed, curious or looking for answers. However, not all apps handle conversations securely. Before sharing deeply personal struggles, medical concerns, financial details or questions that could create legal risk if exposed, take time to understand how the app stores protects your data. If those protections are unclear, consider safer alternatives such as trusted professionals or services with stronger privacy controls.
2) Research the app before installing
Look beyond download counts and star ratings. Check who operates the app, how long it has been available, and whether its privacy policy clearly explains how user data is stored and protected.
3) Assume conversations may be stored
Even when an app claims privacy, many AI tools log conversations for troubleshooting or model improvement. Treat chats as potentially permanent records rather than temporary messages.
4) Limit account linking and sign-ins
Some AI apps allow you to sign in with Google, Apple, or an email account. While convenient, this can directly connect chat histories to your real identity. When possible, avoid linking AI tools to primary accounts used for work, banking or personal communication.
5) Review app permissions and data controls
AI apps may request access beyond what is required to function. Review permissions carefully and disable anything that is not essential. If the app offers options to delete chat history, limit data retention or turn off syncing, enable those settings.
6) Use a data removal service
Your digital footprint extends beyond AI apps. Anyone can find personal details about you with a simple Google search, including your phone number, home address, date of birth and Social Security number. Marketers buy this information to target ads. In more serious cases, scammers and identity thieves breach data brokers, leaving personal data exposed or circulating on the dark web. Using a data removal service helps reduce what can be linked back to you if a breach occurs.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
Kurt’s key takeaways
AI chat apps are moving fast, but security is still lagging behind. This incident shows how a single configuration mistake can expose millions of deeply personal conversations. Until stronger protections become standard, you need to treat AI chats with caution and limit what you share. The convenience is real, but so is the risk.
Do you assume your AI chats are private, or has this story changed how much you are willing to share with these apps? Let us know your thoughts by writing to us at Cyberguy.com.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
The Vergecast Vergecast, 2026 edition
We get a lot of questions about how The Verge works. And how The Vergecast works. And how we make money. And whether some of that money helps Nilay buy more jackets, several yachts, or something else entirely. So, every once in a while, we spend an episode of the podcast answering as many questions as we can.
On this episode of The Vergecast, Nilay and David are joined by The Verge’s publisher, Helen Havlak, to talk about ads, subscriptions, our website, our audience, and more. Then, Nilay and David answer some more questions about how we think about journalism, our relationship with Verge alumni, video podcasts, and (of course) Brendan Carr.
Thanks to everyone who sent us questions for this episode, and please keep them coming! You can always call the Vergecast Hotline (866-VERGE11) or send us an email (vergecast@theverge.com) with your questions, thoughts, feelings, and misgivings about everything we’re up to. We truly love hearing from you. And if you want to be part of everything we’re up to, and help make The Verge even bigger and better, the best thing you can do is subscribe! You even get all our podcasts ad-free.
Oh, and also, in case you missed it yesterday, be sure and check out our emergency pod on the news that Tim Cook is stepping down as Apple CEO. We’ll be talking more about the future of Apple on Friday’s show, too, so send questions if you have ’em!
Technology
Alexa+ lets you order food like a real conversation
Food delivery drones launch in NJ
FOX Business correspondent Madison Alworth reports on drone food delivery services launching in New Jersey on ‘America Reports.’
NEWYou can now listen to Fox News articles!
You’re hungry, and your stomach’s already growling. Normally, you’d grab your phone, open your favorite delivery app and start scrolling through endless restaurant lists. Tap a few menus, pick a few items and before you know it, you’ve built your order piece by piece.
But with Amazon Alexa+, you can skip all that tapping and scrolling. Just tell Alexa what you’re in the mood for, change your mind halfway or add something extra as you go, like you’re chatting with someone taking your order.
That’s the new idea behind Alexa+. Amazon has rolled out a voice-powered food ordering feature that lets you get delivery from Uber Eats and Grubhub without ever opening an app. Just say what you want, and Alexa handles the rest.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
ALEXA.COM BRINGS ALEXA+ TO YOUR BROWSER
Amazon Alexa+ now lets users order food from Uber Eats and Grubhub by voice, turning delivery into a back-and-forth conversation instead of a series of taps. (Michael Nagle/Bloomberg via Getty Images)
What you need to use Alexa+
Now, before you start ordering with your voice, there are a few quick setup steps.
- You need an Alexa+ compatible device, like an Echo Show
- You must link your Uber Eats or Grubhub account in the Alexa app
- Your past orders can sync automatically for quick reordering
Once that’s done, it becomes a hands-free experience.
How to set up Alexa+ for food ordering (step by step)
We set this up using the Amazon Alexa app on a phone, and these are the exact steps we followed. The menus may look slightly different depending on your device.
- Open the Alexa app on your phone
- Tap “More” (it usually has three horizontal lines)
- Tap “Alexa+ Store”
- Use the search bar and type in Uber or Grubhub.
- Tap the service you want
- When it appears, tap to open it.
- Tap “Connect” or “Enable” (You may see a page from “pitangui.amazon.com” during setup. That’s part of Amazon’s system and is safe if you open it from the Alexa app. )
- Next, sign in to your account on your phone
- Tap “Grant access”
- Tap “Continue”
- Tap “Close” to return to the app
After we linked our Grubhub account, we got a confirmation email saying everything was successfully connected. Once that’s all done, it becomes a hands-free experience.
To actually place an order, go to your Echo device and say, “Alexa, I want to order food,” then follow the prompts on the screen. Note: the feature is still rolling out and works best on newer Echo Show devices.
You can also manage or remove the connection anytime in the Alexa app by going to: Alexa App > Menu > Settings > Manage Alexa+ Services Unlink & Revoke Permissions
How Alexa+ actually builds your order
After you’re set up, this is where things start to change. For years, voice assistants followed a simple pattern. You ask something. It answers. That’s it.
With Amazon Alexa+, that model shifts. Instead of giving one command at a time, you can carry on a back-and-forth conversation.
You might start with:
- “Show me Mexican food”
- “Actually, let’s do pizza”
- “Add a large pepperoni with extra cheese”
- “Wait, make that two”
The system updates your order in real time. If you change your mind, it adjusts instantly on screen. Even better, it only jumps in when you need help. That means fewer interruptions and a smoother flow.
GRUBHUB CONFIRMS DATA BREACH AMID EXTORTION CLAIMS
With Alexa+, Amazon is pushing voice ordering beyond basic commands, letting users browse restaurants, customize meals and check delivery status through natural conversation. (Michael Nagle/Bloomberg via Getty Images)
How Alexa+ lets you customize your order
This is where things start to feel different from anything we’ve seen before.
You can explore like you’re talking to a person
You don’t need exact menu names. Say something like “meat lovers pizza,” and Alexa+ finds the closest match. Want dessert? Just ask. Curious what’s popular? Ask that too.
You can change your mind mid-order
Most apps make you backtrack. Alexa+ lets you pivot on the fly. Add items. Remove them. Adjust quantities. Switch restaurants entirely. Everything updates live on your screen.
You see the full breakdown before you pay
Before checkout, you’ll get a clear summary:
- Item names
- Quantities
- Individual prices
- Total cost
That transparency matters, especially when small add-ons can quickly add up.
You can track your delivery with your voice
Once your order is placed, you can simply ask:
“Alexa, where’s my food?”
No need to dig through notifications or open another app.
Why Amazon is pushing Alexa+ now
This isn’t just about food delivery. Amazon is testing a bigger idea. It wants Alexa+ to adapt based on what you’re trying to do. Ordering food needs flexibility. Checking the weather doesn’t. So instead of one rigid interaction style, Alexa+ shifts its behavior depending on the task. Food ordering is just the beginning. Amazon is already hinting at future uses like grocery shopping and travel planning.
GRUBHUB LAUNCHES FIRST-EVER COMMERCIAL DRONE FOOD DELIVERY SERVICE IN NEW JERSEY
Amazon’s new Alexa+ food-ordering feature connects with Uber Eats and Grubhub, allowing users to build, change and track delivery orders without opening an app.
What this means to you
This feature sounds convenient, and in many ways it is. Still, there are a few things worth thinking about before you start ordering dinner out loud. First, it makes ordering easier. That’s great for speed, but it can also make spending feel effortless. When ordering becomes a conversation, it’s easy to keep adding items without paying attention to the total. Second, your data matters. Linking accounts means Amazon can connect your voice activity with your food habits. That includes what you order, when you order and how often. Third, it changes how you interact with technology. Instead of tapping and scrolling, you’re relying on AI to interpret what you mean. That saves time, but it also means trusting the system to get things right. Finally, it may reshape your habits. If this becomes second nature, opening apps could start to feel old-fashioned before long.
Take my quiz: How safe is your online security?
Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.
Kurt’s key takeaways
Ordering food has always been simple. Now it’s becoming conversational. That shift might sound small, but it signals something bigger. Technology is moving away from commands and toward natural interaction. The goal is to make devices feel less like tools and more like assistants. The real question is how far that goes. If your device can handle dinner tonight, what else will it manage tomorrow?
And here’s something to think about: At what point does convenience start making decisions for you instead of helping you make them? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Tim Cook will still be Apple’s Trump whisperer
Though Tim Cook is shedding his CEO title for the role of Apple’s executive chairman, it appears he’ll keep one of his most important duties: that of the company’s Trump whisperer.
“As executive chairman, Cook will assist with certain aspects of the company, including engaging with policymakers around the world,” Apple writes in a press release. Translation: he’s sticking around to deal with thorny political relationships — in particular the one with President Donald Trump.
Throughout his tenure, Cook has navigated Apple through tricky political terrain. He’s had to balance the company’s massive business interest in China with US policymakers’ concerns, and he’s worked to appease Trump for favorable regulatory decisions, without alienating too many Apple employees and customers in the process.
Cook has navigated Apple through tricky political terrain
The task of wooing Trump has repeatedly placed Cook in embarrassing situations: Cook showed the president around a factory in Texas in 2019, where Trump wrongly boasted that because of his policies, Apple was building a new manufacturing plant in the US. Last year, he presented Trump with a symbolic gift of “Made in the USA” glass from Apple supplier Corning set in 24-karat gold.
Recently, Cook took criticism from Trump critics for attending a movie night at the White House, for a screening of the documentary Melania, the same day that Alex Pretti was killed by federal agents on the streets of Minneapolis during a protest against Immigration and Customs Enforcement. Cook later vaguely referred to the “events in Minneapolis,” and referenced a “good conversation with the president.”
As Apple’s senior vice president of hardware engineering John Ternus takes over as CEO, the company will need to overcome significant policy challenges, including global efforts to regulate AI, and a push for app stores to verify user ages. Lucky for Ternus, Cook will still be there to take on that job.
-
Technology9 minutes agoThe Vergecast Vergecast, 2026 edition
-
World15 minutes agoMexico pyramid shooter who took hostages and killed 1 is identified
-
Politics21 minutes agoByron Donalds cracks down on persistent border blind spot leaving US vulnerable to overstays
-
Health27 minutes agoHealthy diets spark lung cancer risk in non-smokers as pesticides loom
-
Sports33 minutes agoPGA Tour signals new era with axing of Hawaii events from schedule
-
Technology39 minutes agoAlexa+ lets you order food like a real conversation
-
Business45 minutes agoNew lawsuit alleges Uber is violating drivers’ rights. Here’s how
-
Entertainment51 minutes agoReview: Trigger warning? ‘For Want of a Horse’ gives new meaning to the term ‘animal lover’