2026 Firebase misconfiguration — 25M users, 300M messages
Data compromised
User messages, account data
Technical writeup
Chat & Ask AI app (by Codeway) exposed 300 million messages from over 25 million users due to a Firebase misconfiguration. An independent security researcher discovered the exposed database. The app has over 50 million users and acts as a wrapper for ChatGPT, Claude, and Gemini.
Root cause
Firebase misconfiguration; database exposed.