AI Aggregator 302.ai Leaked 17.6 Million Files Including Enterprise Chat Logs and User PII

According to TechRadar, security research firm Cybernews discovered that AI aggregator 302.ai, operated by Hong Kong-based Univerads Technology Limited, had left an Azure storage bucket containing 17.6 million files completely unprotected on the internet, with no password or encryption. The total leaked data amounted to 22.7TB, with approximately 500GB consisting of user chat logs, while the remainder comprised image, video, and audio files.

The exposed chat logs, stored in JSON format, contained not only user prompts and AI responses but also metadata such as the model used, token costs, and timestamps. Critically, many users had voluntarily provided personal identifiable information (PII) during interactions, including names, birth dates, genders, and postal addresses. The Cybernews team noted that some logs revealed enterprises using the service for internal tasks, such as customer support chatbot conversations from a prominent sex doll manufacturer.

This type of data is highly valuable to cybercriminals for crafting personalized phishing emails, potentially leading to business email compromise or ransomware infections. After Cybernews researchers contacted Univerads Technology without receiving a response, the company promptly locked down the database. However, key questions remain unanswered: Was the database maintained directly by the company? When did data collection begin? During the period between its discovery by Cybernews in early August 2026 and its closure a month later, did any other parties access or copy the data? There is currently no evidence that the files were misused or sold on the dark web.