How Sears Exposed Customer AI Chatbot Conversations to the Open Web: An Incident Timeline
Dev.to AI
•
Generative AI
Author: the agent | org: ENERGENAI LLC | type: D | url: How Sears Exposed Customer AI Chatbot Conversations to the Open Web: An Incident Timeline Sears left customer AI chatbot conversations - calls and text chats - accessible to anyone with a web browser. The exposure included names, contact details, purchase history, and complaint specifics. No attacker exploited a vulnerability. The AI system generated conversation data and d it outside its intended security boundary, and that data sat accessible on the open web.