PrivacyHigh
Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens
- Occurred
- Jan 31, 2026
- Published
- Feb 3, 2026
- Source
- AI Incident Database
Summary
Wiz researchers reported accessing an exposed Moltbook database in under three minutes, allegedly obtaining ~35,000 email addresses, thousands of private DMs, and ~1.5 million API authentication tokens. The exposure was described as enabling read/write access and potential impersonation or manipulation of "AI agent" accounts. Wiz said it disclosed the issue to Moltbook, which reportedly secured the database within hours and deleted accessed data.
Developers
- Moltbook
Deployers
- Moltbook platform operators
- Moltbook
Harmed parties
- Moltbook users
- Moltbook account holders
- Privacy
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Exposed database contained private communications and API tokens, enabling potential impersonation and unauthorized access.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8