ClarityCheck Exposed Millions of Facial Images and Personal Data Due to Unsecured Database
A reverse-lookup service called ClarityCheck publicly exposed over 9 million image files, including photographs of people's faces, and a separate misconfiguration exposed email addresses and phone numbers. Independent security researcher Jeremiah Fowler discovered that the 450 GB database of images, which included photos of adults, teenagers, and children, was stored in an unsecured Amazon S3 bucket. These files, found in folders labeled 'faces' and 'profiles,' were accessible online via a URL embedded in the company's public website code. ClarityCheck, a 'people-finder' tool, claims to identify individuals through various searches, including photo uploads, and assures users of privacy and security. However, the exposure meant that individuals whose images were stored in the database likely had no knowledge of it, raising significant privacy concerns, especially given the sensitive nature of biometric data like facial images. The company secured the database after being contacted by WIRED in July, though F... 
