Breach Database / ai.type

▍Yes — ai.type was breached.

• 20.6 million accounts affected
• Breach occurred 2017-12-05 · aitype.com
• Verified entry in the Have I Been Pwned catalog

What happened

In December 2017, the virtual keyboard application ai.type was found to have left a huge amount of data publicly facing in an unsecured MongoDB instance. Discovered by researchers at The Kromtech Security Center, the 577GB data set included extensive personal information including over 20 million unique email addresses, social media profiles and address book contacts. The email addresses alone were provided to HIBP to enable impacted users to assess their exposure.

What data was exposed

• Address book contacts
• Apps installed on devices
• Cellular network names
• Dates of birth
• Device information
• Email addresses
• Genders
• Geographic locations
• IMEI numbers
• IMSI numbers
• IP addresses
• Names
• Phone numbers
• Profile photos
• Social media profiles

What to do right now

1. Be alert for smishing and SIM-swap attempts. Treat unexpected texts and "carrier" calls with suspicion; add a PIN/port-freeze with your mobile carrier.
2. Expect convincing phishing emails. Attackers use breached details to write personalized emails. Be suspicious of any message referencing this service.
3. Check your other accounts on Have I Been Pwned. Your email address may appear in other breaches you don't know about yet.
4. Monitor the apps you use going forward. Clearly watches the breach record for the companies behind your apps and alerts you the moment one appears.

Breach data from Have I Been Pwned. Listing here means the service appears in the public breach record — not that your personal data was affected.