Google admits that Google Photos were accidentally sent some of the user’s videos to strangers due to a “technical issue” between November 21st and November 25th.
Google Alerting users via Email notification that they have faced a technical issue in “Download your Data” service for Google Photos.
Download Your Data service that lets You export your backup data from the Google products you use, like your email, calendar, and photos.
A technical privacy issue had been in the tool has led to exposing the stored videos in Google Photos to strangers who don’t own those videos.
In results, some of your videos might be visible to a random person who can even download the videos from the backup.
This Privacy issue affected the small number of Google Photo’s Users doesn’t provide any details on how many people were affected, nor the number of individual videos that were distributed to strangers.
According to Google ” less than 0.01% of Photos users attempting Takeouts were affected, and no other product was affected.”
According to Jon Oberheide , CTO Duo Security “To be clear, this is a big screw-up. I hope the number of affected parties is small, but the impact to those parties could be high…and very unsettling. But my real beef is with this nonchalant and non-specific notification email. Hopefully, Google follows up with more comms.”
Google ended a Statement with apologies and said ” We are notifying people about a bug that may have affected users who used Google Takeout to export their Google Photos content between November 21 and November 25. These users may have received either an incomplete archive, or videos—not photos—that were not theirs. We fixed the underlying issue and have conducted an in-depth analysis to help prevent this from ever happening again. We are very sorry this happened.” “
Google said that it was fixed this software bug and the technical issue has been identified and resolved.
Also Read: How Does World’s Highly Secured Google Network Works? Google’s Effort & Dedication
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…
View Comments
This is serious. The internet is never safe, has never been safe.