Ai.type keyboard app has become the latest target for hackers. According to reports, the app leaks personal data for over 31Mn users. Although the virtual keyboard possesses around 40Mn users across Android and iOS, it appears that the Ai.type data leak relates to Android users only.
Security researchers found an unsecured database server owned by Eitan Fitusi, co-founder of Ai.type. The server boasts over 577GB of data and was accessible to anyone. Fitusi says that the company has secured the database with a password after the revelation of the data leak. However, the company hasn’t commented on the issue yet.
The leaked data of Ai.type keyboard replacement includes names, email addresses, as well as the exact location of users such as city and country data. However, some of the exposed records are far more major and consist of phone numbers and IP addresses. In some cases, there are even specific details from users’ Google profile, including gender, birth date, and profile picture.
The leaked data of Ai.type keyboard app doesn’t end here as the virtual keyboard had access to users’ contacts. One of the exposed database tables contains around 10.7Mn email addresses from contact data, while another table includes 374.6Mn phone numbers. It’s unclear why the app uploaded phone numbers and email addresses of users’ contacts.
Read more at How to use Google Keyboard on Android
Almost every record contains a device’s IMSI and IMEI number. For those who’re too new to the terms, these are unique numbers that cellular networks employ to identify subscribers. Ai.type keyboard app also gathered the data of your phone, including Android version, screen resolution, and model. Really worse, isn’t it?
In its Google Play listing, Ai.type confirms that users’ privacy is its main concern. According to the company, every text typed on the keyboard is encrypted as well as private. However, this seems to be 100% marketing speak, persuading users to download the app. Without a doubt, security isn’t a massive concern as the company left its database with 375.6Mn phone numbers and 10.7Mn email addresses unsecured.
Moreover, it also appears that the text typed on Ai.type keyboard app was neither encrypted nor private. Given that researchers were able to download and look through the files, there was clearly no encryption. Researchers even discovered a table having 8.6Mn entries on the keyboard. These records consist of web search terms, phone numbers, and email addresses along with their equivalent passwords. All this appears to go against Ai.type’s promise that your data will not be shared.
Anyone can download your personal data, ranging from your name and email address to passwords. In case you’ve ever download Ai.type keyboard app on your device, it’s recommended to delete it right away and change all your passwords.
You may also like: Top 10 Gboard features and how to use them