{"schema_version":"0.10.0","id":"LR-2026-0418","record_version":1,"title":"Moltbook AI social network exposed millions of human credentials","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":56.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.8,"unhedged_language":4.74},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Engadget · subject to change","original_document":null,"reports_total":2,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Engadget · subject to change"}]},"sources_hash":"8cd04aa5437528cb35e14eb1b2ea8b6a9f58c0a8b7ed39a145c50cac084db001"},"system":{"model_name":null,"model_version":null,"developer":"Moltbook","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"Social network where OpenClaw AI agents create posts, interact with one another and carry out automated tasks","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-02-02","incident_class":"operational_error","failure_class":null,"agent_involved":false,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Moltbook, a social network where OpenClaw AI agents create posts, interact with one another and carry out automated tasks, left a back-end database publicly reachable. Security firm Wiz reported that the database held 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents. The researchers found the problem and told the Moltbook team, which secured the data within hours. Wiz described the cause as a basic misconfiguration: the database lacked authentication controls. Wiz said there was no evidence the exposed data was exploited before it was taken down. Wiz also pointed to development practices, including heavy reliance on AI-assisted coding, that may have contributed.","tags":[],"date_detected":null,"near_miss":null,"root_cause":"infrastructure","root_cause_detail":"Basic security misconfiguration: the database lacked authentication controls and was reachable by anyone who knew where to look.","failure_class_detail":null,"responsible_party":null,"adversarial_actor":"none","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"secured the data within hours","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":["API authentication tokens","email addresses","private messages"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://siliconangle.com/2026/02/02/ai-agent-social-network-moltbook-left-millions-credentials-publicly-exposed/","publisher":"SiliconANGLE","date":"2026-02-02","type":"press","title":"AI agent social network Moltbook left millions of credentials publicly exposed - SiliconANGLE","archived_url":null,"attachment":"first_report"},{"url":"https://www.engadget.com/ai/moltbook-the-ai-social-network-exposed-human-credentials-due-to-vibe-coded-security-flaw-230324567.html","publisher":"Engadget","date":"2026-02-02","type":"press","title":"Moltbook, the AI social network, exposed human credentials due to vibe-coded security flaw - Engadget","archived_url":null,"independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","context.industry":"C","event.agent_involved":"C","event.detection_method":"C","event.root_cause":"C","event.root_cause_detail":"C","event.adversarial_actor":"C","event.remediation":"C","impact.data_categories_exposed":"C","event.incident_class":"D","impact.severity":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":1,"quote":"Moltbook bills itself as a social network for AI agents."}],"system.intended_use":[{"source_index":0,"quote":"Moltbook is designed as a social network where OpenClaw AI agents can create posts, interact with one another and carry out automated tasks."}],"context.industry":[{"source_index":0,"quote":"Moltbook, the recently launched social media platform for artificial intelligence agents, has been hit by a major security lapse that has left millions of sensitive credentials exposed, according to a report today from cybersecurity firm Wiz Inc."}],"event.agent_involved":[{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."}],"event.detection_method":[{"source_index":1,"quote":"The flaw was discovered by cybersecurity firm Wiz, and its team assisted Moltbook with addressing the vulnerability."}],"event.root_cause":[{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."}],"event.root_cause_detail":[{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."}],"event.adversarial_actor":[{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."}],"event.remediation":[{"source_index":0,"quote":"The researchers did immediately provide details to the Moltbook team, which secured the data within hours."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"Wiz researchers say they discovered a misconfigured database that included 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents."}],"event.incident_class":[{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."}],"impact.severity":[{"source_index":0,"quote":"Wiz researchers say they discovered a misconfigured database that included 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents."}],"event.summary":[{"source_index":0,"quote":"Moltbook is designed as a social network where OpenClaw AI agents can create posts, interact with one another and carry out automated tasks."},{"source_index":0,"quote":"The idea behind Moltbook has attracted attention in AI developer circles, but the site failed to secure a core back-end database, leaving it openly accessible on the public internet."},{"source_index":0,"quote":"Wiz researchers say they discovered a misconfigured database that included 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents."},{"source_index":0,"quote":"The researchers did immediately provide details to the Moltbook team, which secured the data within hours."},{"source_index":0,"quote":"There’s no evidence that the exposed data was exploited before it was taken down."},{"source_index":0,"quote":"The incident was also not the result of a sophisticated cyberattack but instead came about from a basic security misconfiguration: The database lacked authentication controls and was reachable by anyone who knew where to look."},{"source_index":0,"quote":"Wiz also pointed to development practices that may have contributed to the issue, noting that Moltbook relied heavily on AI-assisted coding techniques, more commonly known as vibe coding."}]},"notes_on_gaps":"No source states when the database was exposed or when it was detected, so date_occurred and date_detected are omitted. Records exposed are not given as one count (1.5 million tokens and 35,000 emails are different kinds of item), so records_exposed is omitted. No model name, model version, harness or autonomy level is stated; these are omitted. No country is stated. Developer is taken from Engadget's description of Moltbook; the founder claim is not verified. Engadget says thousands of human users were affected while Wiz gives 35,000 email addresses; both are kept as stated. Severity major is my judgement that 35,000 email addresses are a stated count of affected third parties. Mapping the authentication gap to J2 and treating the fix as adding J2 are my inferences, as the sources do not name controls. Wiz's vibe-coding point is reported as a possible contributor, not a confirmed cause. Reversibility is unknown. Responsible party is not stated and is omitted. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Engadget · subject to change)]"},"context":{"industry":"social media","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Moltbook is a social network where OpenClaw AI agents create posts, interact and carry out automated tasks.","quote":"Moltbook is designed as a social network where OpenClaw AI agents can create posts, interact with one another and carry out automated tasks.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"The site failed to secure a core back-end database, leaving it openly accessible on the public internet.","quote":"The idea behind Moltbook has attracted attention in AI developer circles, but the site failed to secure a core back-end database, leaving it openly accessible on the public internet.","source_index":0,"grade":"C"},{"step":"caught","text":"Cybersecurity firm Wiz reported finding the misconfigured database holding the exposed data.","quote":"Wiz researchers say they discovered a misconfigured database that included 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents.","source_index":0,"grade":"C"},{"step":"done","text":"The researchers gave Moltbook details immediately and the team secured the data within hours.","quote":"The researchers did immediately provide details to the Moltbook team, which secured the data within hours.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://siliconangle.com/2026/02/02/ai-agent-social-network-moltbook-left-millions-credentials-publicly-exposed/","https://www.engadget.com/ai/moltbook-the-ai-social-network-exposed-human-credentials-due-to-vibe-coded-security-flaw-230324567.html"]},"analysis":{"sections":{"timeline":[{"text":"Wiz gave Moltbook details immediately and the team secured the data within hours.","quote":"The researchers did immediately provide details to the Moltbook team, which secured the data within hours.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://siliconangle.com/2026/02/02/ai-agent-social-network-moltbook-left-millions-credentials-publicly-exposed/","https://www.engadget.com/ai/moltbook-the-ai-social-network-exposed-human-credentials-due-to-vibe-coded-security-flaw-230324567.html"]}}