Sources
Incident summary from the AI Incident Database, used under CC BY-SA 4.0.
Security researchers reported that the Urban VPN Proxy browser extension introduced AI conversation–harvesting functionality in version 5.5.0, released July 9, 2025. The extension allegedly intercepted and exfiltrated private conversations from AI platforms including ChatGPT, Claude, Gemini, Grok, and others without a user-facing opt-out. The data, including sensitive personal and financial information, was reportedly shared with affiliated data brokers for commercial analytics.
Incident summary from the AI Incident Database, used under CC BY-SA 4.0.
Spot an error, or know a record we should add? Members can propose additions and submit corrections.