AI Chatbot Data Exposure and Institutional Restrictions Driven by Privacy and Security Risk

A misconfiguration in Firebase exposed nearly 300 million private messages from roughly 25 million users of the AI chatbot app Chat & Ask AI, after the app’s Firebase Security Rules were left publicly accessible. Reporting indicates the exposed data included full chat histories, bot names, and highly sensitive user prompts (including self-harm and potentially unlawful activity discussions); the issue was reported to developer Codeway by a researcher who also claimed to have identified similar inadvertent exposure across 103 other iOS apps, underscoring how common cloud-database misconfigurations remain as AI features are embedded into consumer applications.

Separately, the European Parliament restricted lawmakers’ use of built-in AI tools on work devices, citing cybersecurity and privacy concerns about uploading confidential correspondence to external cloud services and uncertainty over how uploaded data may be stored, reused for model improvement, or accessed under non-EU legal authorities. In healthcare, ECRI Institute researchers warned that AI chatbots represent a leading 2026 health technology hazard due to safety, security, and privacy risks—particularly because many tools are not validated for clinical use—while also highlighting that IT outages (including those caused by cyberattacks) and legacy medical device issues remain major operational and patient-safety threats.