{
 "id": "AIR-2023-0009",
 "slug": "clearview-ai-code-repository-misconfiguration-exposes-produc",
 "title": "Clearview AI code repository misconfiguration exposes production credentials and video samples",
 "summary": "A misconfigured code repository allowed unauthorized user registration, giving external researchers access to production credentials, cloud storage keys, and video samples. The exposed assets included sensitive data linked to the AI system.",
 "type": "attack_on_ai",
 "categories": [
  "data_leak"
 ],
 "severity": 3,
 "targets": [
  "enterprise_deployment"
 ],
 "products": [
  "Clearview AI Facial Recognition Tool"
 ],
 "incident_date": "2020",
 "incident_date_precision": "year",
 "first_reported": "2023-03-31",
 "sources": [
  {
   "url": "https://github.com/avidml/avid-db/blob/main/vulnerabilities/2023/AVID-2023-V007.json",
   "publisher": "AVID",
   "title": "AVID-2023-V007: Clearview AI makes a facial recognition tool that searches publicly available photos for matches.",
   "published_at": "2023-03-31"
  },
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0006",
   "publisher": "MITRE ATLAS",
   "title": "ClearviewAI Misconfiguration",
   "published_at": "2023-03-31"
  },
  {
   "url": "https://techcrunch.com/2020/04/16/clearview-source-code-lapse",
   "publisher": "TechCrunch",
   "title": "TechCrunch Article, \"Security lapse exposed Clearview AI source code\"",
   "published_at": "2023-03-31"
  },
  {
   "url": "https://gizmodo.com/we-found-clearview-ais-shady-face-recognition-app-1841961772",
   "publisher": "gizmodo.com",
   "title": "Gizmodo Article, \"We Found Clearview AI's Shady Face Recognition App\"",
   "published_at": "2023-03-31"
  },
  {
   "url": "https://nytimes.com/2020/01/18/technology/clearview-privacy-facial-recognition.html",
   "publisher": "The New York Times",
   "title": "New York Times Article, \"The Secretive Company That Might End Privacy as We Know It\"",
   "published_at": "2023-03-31"
  }
 ],
 "source_count": 5,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_avid",
 "tags": [
  "data-leak",
  "credential-exposure",
  "misconfiguration"
 ],
 "created_at": "2026-10-18T06:56:23.100Z",
 "updated_at": "2026-10-18T06:56:23.100Z"
}
