If you use the keyboard app developed by Ai.Type, your personal information has probably been leaked, as security researchers have discovered that the company is secretly collecting data and storing it in a base MongoDB data.
Security company Kromtech estimates that sensitive data belonging to about 31 million users is included in this database, and entries have been found to show that the keyboard application recorded almost every keystroke, whether it was plain text or passwords.
While the app's developer says it doesn't collect information from password fields and that all data is encrypted, ZDNet reveals that the database discovered by Kromtech included everything from full user names, email addresses, geographic location, the device, model, IMEI , and Android versions. It also includes more personal information collected from social media, such as dates of birth, gender, profile pictures, contacts and even passwords.
Η Kromtech λέει ότι η βάση δεδομένων είναι 577 GB και ήταν εκτεθειμένη στο διαδίκτυο. Η βάση δεδομένων ήταν ελεύθερα διαθέσιμη σε οποιονδήποτε με connection on the Internet, and contains at least 31.293.959 files.
There are 6.435.813 entries with information collected from contact lists, including phone numbers and names. The security firm estimates that the keyboard app has saved over 373 million entries in the servers of the company that developed it.
In most cases, third-party keyboard applications require full access to Android data, and Google's operating system warns that this could cause problems.
Ai.Type's keyboard app is also available for iPhone and it also requires full access, but it is currently unclear whether Apple device users or only Android users were leaked.
