What's Happening?
A recent investigation by Tel Aviv-based security firm Koi has revealed that Urban VPN Proxy, a free extension on Google’s Chrome browser, is involved in a massive data harvesting operation. The extension,
which boasts around six million users, is reportedly intercepting and capturing conversations from leading AI platforms such as OpenAI’s ChatGPT, Anthropic’s Claude, and Google’s Gemini. The data collected includes sensitive information like medical questions, financial details, and personal dilemmas, which are then sold for marketing analytics purposes. The extension's data collection is enabled by default, and users have no option to disable it other than uninstalling the extension. Urban Cyber Security Inc, the company behind Urban VPN Proxy, has a privacy policy that acknowledges sharing web browsing data with its affiliated company, BiScience, for commercial use.
Why It's Important?
This revelation highlights significant privacy concerns for users of AI chatbots and VPN services. The data harvesting practices of Urban VPN Proxy could have far-reaching implications for user privacy, as sensitive information is being collected and sold without explicit user consent. This situation underscores the need for stricter regulations and transparency in data collection practices, especially for applications that handle personal and sensitive data. The incident also raises questions about the responsibility of platforms like Google’s Chrome Web Store in endorsing such extensions, as Urban VPN Proxy carries a 'featured' badge, suggesting a level of trust and security that may not be warranted.
What's Next?
Users of Urban VPN Proxy and similar extensions are advised to uninstall these applications immediately to protect their privacy. The incident may prompt increased scrutiny and potential regulatory action against companies involved in such data harvesting practices. It also serves as a wake-up call for users to review the privacy policies of the applications they use and to be more vigilant about the permissions they grant. Additionally, this could lead to broader discussions and potential reforms in data privacy laws to better protect consumers from unauthorized data collection.
