500,000 Downloads… and 12TB of Your Photos Exposed? Play Store App Leak Is Worse Than You Think!

Many Android users trust apps from the Google Play Store. But not every app is safe. A new report shows that two apps from the same developer have put user data at risk. One app, called Video AI Art Generator & Maker, was a big hit. It had over 500,000 installs and more than 11,000 reviews. It lets users edit photos and make AI art. But behind the scenes, there was a huge flaw.

A Google Cloud Storage bucket used by the app was set up the wrong way. Because of this, anyone could view and access stored files. No login was needed. This left over 12 TB of media files open to the public. Since its launch on June 13, 2023, the app has stored every file users made or shared. In total, 8.27 million media files were exposed. This included over 1.5 million user images, more than 385,000 videos, and millions of AI files made by users.

After the news broke, the app no longer showed up in the Play Store. Google has said it hid the app after the report came out.

The story does not end there. Another app from the same developer, called IDMerit, also had a serious issue. It exposed what is known as "Know Your Customer (KYC) data." KYC data is the kind of info banks and firms must collect to check who you are. It helps them judge risk before they work with you. This data often holds full names, home addresses, phone numbers, job info, and ID docs.

In this case, that data was left open to bad actors. The leak hit users in the U.S. and 25 other countries, such as Germany, France, China, and Brazil. Reports say the leak held a “treasure trove” of key user info.

When apps ask for your photos, ID, or work info, you trust they will guard it well. But the case also shows how a single mistake can put millions of users at risk. Your photos, videos, and KYC information can cause a lot of damage if they fall into the wrong hands. This case also shows that not all apps on the Play Store are safe. Before you download an app, check the developer and think carefully before you share information.