Exposed GenNomis AWS bucket leaks roughly 95,000 images including apparent child abuse material
Date: 2024-03
Affected: GenNomis users and depicted subjects
Attack vector: data-exfiltration
Category: real-world
Severity: Critical

An open AWS S3 bucket associated with AI image generator GenNomis exposed roughly 95,000 generated images including explicit material of identifiable people and what appeared to be minors, demonstrating both unsafe defaults and storage failures.


Mitigations:

Architectural layers (MAESTRO):