A “private and secure” face-search tool left 9 million photos exposed

ClarityCheck, a face-search service claiming privacy, left over 9 million photos exposed in an unsecured 450GB database accessible without a password. Researcher Jeremiah Fowler discovered the breach and notified the company, which has since secured the data. Additionally, a separate vulnerability allowed access to personal contact details via URL manipulation.