Cybernews reports 17.6 million files exposed at 302.ai

Cybernews says an unsecured Azure storage bucket used by AI aggregator 302.ai exposed 17.6 million files. The researchers attributed the service to Hong Kong-based Univerads Technology Limited, which launched 302.ai six years ago.

The archive totaled 22.72TB. Image files accounted for almost 9TB, video for 7.7TB and audio for 5.6TB. About 500GB consisted of more than 144,000 user chat logs stored as .json files. The logs included prompts, AI replies, model names, token costs, timestamps and other metadata. Some users had also provided names, birth dates, genders, postal addresses and other contact details.

Cybernews said some companies used the service for enterprise tasks and reported finding chat logs from a customer-support chatbot owned by a sex-doll manufacturer. The researchers warned that exposed personal and business information could help criminals tailor phishing attempts.

Cybernews researchers contacted Univerads Technology but received no response. The company secured the database, which was no longer exposing files when the article was published. Cybernews said it found the archive in early August 2026 and saw it secured a month later. The researchers did not establish how long it had been exposed, whether anyone else accessed or copied files, or whether data was misused. The report does not confirm that any misuse occurred.