Reverse-lookup service exposed millions of photos of people’s faces

Researcher Jeremiah Fowler discovered that ClarityCheck stored about 450 GB of images—including profile pictures, screenshots, and photos of adults, teens and children—in an unsecured Amazon S3 bucket, exposing over 9 million files via URLs in the site’s code. A separate misconfiguration also leaked users’ email addresses and phone numbers.