A misconfigured Google Firebase backend on Codeway’s “Chat & Ask AI” app, used by more than 50 million people, left roughly 300 million private conversations from 25 million users publicly accessible without authentication. Exposed records included full chat histories, model selections, and timestamps, with some conversations containing requests for suicide methods and instructions for making illegal drugs. Researchers found the same misconfiguration pattern affecting other apps built on the same underlying template.