WotNot AI chatbot platform exposes 346,000 customer files
WotNot left a Google Cloud Storage bucket publicly accessible, exposing 346,381 files including passports, medical records, and resumes from customer deployments.
The breach was caused by cloud storage bucket policies modified to accommodate a specific use case, and accessibility was not thoroughly verified.
Key facts
- What
- WotNot left a Google Cloud Storage bucket publicly accessible, exposing 346,381 files including passports, medical records, and resumes from customer deployments.
- Incident date
- Dec 3, 2024
- Who
- WotNot
- Failure mode
- Data Leakage
- AI surface
- Chatbot
- Severity
- High
What happened
WotNot, an Indian AI startup, left a cloud storage bucket publicly accessible. This allowed the leak of 346,381 files collected through chatbots deployed by their customers. The exposed data included highly sensitive personally identifiable information, such as medical records and passports.
What broke inside the model
- 01 · TriggerA request triggers retrieval or context loading.
- 02 · Model stepThe context pulls in another user's content.
- 03 · Control gapNo boundary enforces isolation at the moment of output.
- 04 · FailurePrivate data crosses into the response.
- 05 · ConsequenceOne user sees another's data, and disclosure follows.
One user's content crosses the retrieval boundary into another's response.
The breach occurred because cloud storage bucket policies were modified for a specific use case, inadvertently granting public access to the data. WotNot failed to verify the accessibility of the bucket after these changes. This vulnerability specifically affected users on the company's free plan.
What it cost
Sources
- PrimaryAI chatbot provider exposes 346,000 customer files, including ID documents, resumes, and medical recordsmalwarebytes.com
- PrimaryAI chatbot startup WotNot leaks 346,000 files, including passports and medical recordsbitdefender.com
- PressOver 346K files exposed by WotNot's misconfigured cloud databasescworld.com
Cite this entry
https://failureindex.ai/failures/wotnot-chatbot-platform-exposes-346-000AI Failure Index. "WotNot AI chatbot platform exposes 346,000 customer files" (FI-0217). Realm Labs. https://failureindex.ai/failures/wotnot-chatbot-platform-exposes-346-000 (indexed Jun 5, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0217. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- Prism
- OmniGuard
- AI Detection & Response (AIDR)
Realm can detect when a response is about to emit data that falls outside the bounds of the current user and context, and block or redact it inline, at the moment of generation rather than after the data has left.