# AI firm's breach archive exposed 13.7 million records online

> Vibetech collected data from past breaches into one database and left it publicly accessible, including passwords and banking details from AT&T, Amazon and PayPal.
- Title: AI firm's breach archive exposed 13.7 million records online
- Summary: Vibetech collected data from past breaches into one database and left it publicly accessible, including passwords and banking details from AT&T, Amazon and…
- Keywords: vibetech, data breach, jeremiah fowler, at&t, amazon, paypal, exposed database, cybersecurity, technology, firm's, breach, archive
- Source: TechRadar — https://techradar.com/pro/security/massive-data-leak-from-ai-development-company-exposes-almost-14-million-records-vibetech-collected-data-from-different-breaches-and-accidentally-made-them-accessible-online
- Published: 2026-10-14T13:05:00+00:00
- Read time: 2 min
- Topics: vibetech, data breach, jeremiah fowler, at&t, amazon, paypal, exposed database, cybersecurity, technology
## Researcher finds massive breach archive online
Security researcher Jeremiah Fowler discovered a database containing thirteen point seven million records from past data breaches sitting openly on the internet.
## Archive held passwords and banking details
The exposed database included names, phone numbers, email addresses, passwords, bank account details and more from individuals across multiple countries.
## Data came from major company breaches
Almost eight million records came from an AT and T data leak. Other sources included Amazon with one point two million records, Walmart with four hundred twenty thousand, and PayPal with eighteen thousand.
## Archive included government agency data
The database also contained smaller leaks from the FBI Employee Directory with four thousand eighty four records and Interpol with nine hundred twenty nine records.
## Vibetech collected breach data deliberately
Fowler discovered the database was connected to Vibetech, an Indian software development platform. He speculates the company was collecting datasets from previous breaches and inadvertently made them publicly accessible.
## Breach data collection raises legal questions
Fowler notes a growing number of organizations intentionally collect and sell breached credential datasets for research or threat intelligence. He argues they operate in a legally and ethically complex environment.

> Although these datasets can provide valuable insights into attack trends, credential reuse, and emerging threats, organizations that collect compromised personal information operate in a legally and ethically complex environment.
## Unprotected databases remain a widespread problem
Unprotected databases are a leading cause of data leaks. In early twenty twenty four, researchers discovered an archive with personal information on approximately two hundred twenty three million Brazilians.
## Database was secured after disclosure
Fowler notified Vibetech and the hosting provider. The database was restricted and made no longer publicly accessible soon after. A day later the IP address displayed an Information Security Management System compliance platform dashboard.
## Exposed individuals should change passwords
Individuals who think their information may have been exposed in any of these breaches should change their passwords immediately and be careful with incoming email messages.
## Key takeaway

Security researcher Jeremiah Fowler discovered Vibetech had collected thirteen point seven million records from previous data breaches and left them unprotected online, exposing passwords and banking details before the database was secured.