Jan 31, 2026Single source
Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens
Rogue: Caused harmAI loose in the worldInjectionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
Wiz researchers reported accessing an exposed Moltbook database in under three minutes, allegedly obtaining ~35,000 email addresses, thousands of private DMs, and ~1.5 million API authentication tokens. The exposure was described as enabling read/write access and potential impersonation or manipulation of "AI agent" accounts. Wiz said it disclosed the issue to Moltbook, which reportedly secured the database within hours and deleted accessed data.
What this means for youIf you use Moltbook or a similar AI agent platform, your email, private messages, and any linked access tokens may have been exposed, so change your password and revoke connected tokens. At work, staff using these platforms should treat any stored API keys as compromised and rotate them.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1364
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 1948. It has not been edited since it was approved; the hash above would not match if it had. How to verify