Secret Desires AI Platform Exposed Nearly Two Million Sensitive Images
An AI platform for generating explicit roleplay content left nearly two million images and videos exposed in unsecured cloud storage, including scraped social media photos, private screenshots, and references to underage victims, alongside users' names and personal information. The company secured the files within an hour of being contacted by journalists.
What happened
Secret Desires, an AI chatbot and image generator platform, left nearly two million images and videos exposed in unsecured cloud storage containers accessible to the public internet.
The exposed data included explicit AI-generated content alongside personally identifiable information such as users' names, workplaces, and universities. Files included scraped social media images, private screenshots, influencer photos, yearbook photos, and Snapchat screenshots, along with content from a now-defunct faceswap feature.
Within an hour of 404 Media contacting the company, the exposed files became inaccessible. Secret Desires did not respond to requests for comment.
Reported impact
Some exposed files contained references in filenames to underage victims. The combination of explicit media with personal identifying information creates risk for harassment, extortion, and doxing.
The incident exposes women and girls to nonconsensual deepfakes created through the platform's tools.
Index analysis
Poorly configured cloud storage with public access and loose access controls is a widespread security failure, particularly among startups without mature governance practices.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.