Reverse image search service ClarityCheck left over 9 million face photos, along with email addresses and phone numbers, publicly exposed via an unsecured Amazon S3 bucket containing ~450GB of data. The vulnerability, discovered by researcher Jeremiah Fowler, persisted for months before the company secured the database after WIRED reached out.
Background
ClarityCheck is a people-search reverse image lookup tool that claims to identify individuals from photos. The incident highlights ongoing risks of misconfigured cloud storage exposing sensitive biometric data.
- Source
- Ars Technica
- Published
- Aug 20, 2026 at 09:29 PM
- Score
- 7.0 / 10