Third-party keyboards are a popular way to customize your Android device, but you should be wary of which keyboards you choose to install and use. Security researchers at The Kromtech Security Center have discovered that the AI.Type Keyboard has exposed the data and details of 31,293,959 Android and iOS users.
The researchers say they were able to access AI.Type’s full 577GB database of information on its users since it wasn’t password secured, showing that the third-party keyboard app collected things like contacts and keystrokes when typing. The MongoDB used to store the data was improperly configured and allowed researchers (or anyone with an internet connection) to browse the database in full and even download and delete information from it.
AI.Type Data Exposed
- Phone Number
- Full Name
- Device Name & Model
- IMEI Number
- Email Accounts
- Country of Residence
- Links to Social Media
- IP
- Location Details
- Contacts
It’s very likely that if you’ve ever downloaded the AI.type keyboard to try it out, you’ve been exposed in this leak. The amount of data collected by the keyboard is startling and if the information falls into the wrong hands, it could be used to identify millions of people through these markers.
Comments