ClarityCheck , a facial recognition tool , has raised concerns in the technology and data security community after it allegedly left millions of photos of people publicly exposed online . This major privacy breach raises serious questions about the management of personal data and the security of information online.
ClarityCheck allows anyone to upload a photo of someone to perform a reverse social media search to identify the person. Although the service requires users to agree that they have permission to upload the photo, security researcher Jeremiah Fowler expressed skepticism about the effectiveness of this requirement.
See also: Discord – Data Breach: ID Photos Exposed
Fowler notes that the service is explicitly designed for identification , and people typically don't seek to identify themselves or people they already know. This suggests that many users may be uploading photos of others without their consent, violating those individuals' privacy.
Fowler’s discovery revealed that more than nine million image files uploaded to ClarityCheck had been publicly accessible on a cloud server for several months. These files, totaling 450.2GB in size, consisted primarily of images of faces, stored in folders labeled “faces” and “profiles.” The lack of password protection or encryption of the database made the images vulnerable to malicious use.
In a limited sample of exposed images examined during the investigation, images of adults, teenagers, and children. Many of the uploaded images may have come from third-party sources, such as private profiles, social media accounts, dating app, screenshots, or physical photos uploaded by third-party users. This variety of sources suggests that ClarityCheck users may have access to sensitive information without the permission of the individuals depicted.
See also: How to share vacation photos without exposing your privacy
ClarityCheck admitted that it owns the exposed database and said it has now secured the data. However, the damage has already been done, as the images were accessible for several months, allowing malicious users to exploit them.
One of the risks Fowler identified is that the photos and associated identities could be used by scammers to create fake social media posts with the aim of defrauding family and friends. A common scam scenario involves pretending to be a family member in an emergency situation that requires immediate money transfer.
See also: Lovable left thousands of works on display for 48 days
Access to photos of faces could facilitate this type of fraud, as scammers can create more convincing fake profiles.
The ClarityCheck case highlights the need for stricter regulations and security measures in the storage and management of personal data. Internet users must be particularly careful about the information they share and the services they use, while companies must ensure the protection of their users' data. Facial recognition technology, although useful in many applications, carries risks that must be addressed responsibly and transparently.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
