Reverse-Lookup Service Exposed Millions of Photos of People’s Faces

Jeremiah Fowler discovered that ClarityCheck stored about 450 GB of images—over 9 million photos of adults, teens and children—in an unsecured Amazon S3 bucket, accessible via URLs found in the site’s public code. The same misconfiguration also exposed users’ email addresses and phone numbers, and the data remained publicly reachable for months before the company restricted access after being notified.