Cases › operational mistake › LR-2026-0418
Moltbook AI social network exposed millions of human credentials
Preliminary Why: 1 report: Engadget · subject to change · 1 independent report
Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.
Status: fix reported
No source states: loss or records, agent tool, could do, deployer.
Moltbook, a social network where OpenClaw AI agents create posts, interact with one another and carry out automated tasks, left a back-end database publicly reachable. Security firm Wiz reported that the database held 1.5 million API authentication tokens, 35,000 email addresses and private messages between agents. The researchers found the problem and told the Moltbook team, which secured the data within hours. Wiz described the cause as a basic misconfiguration: the database lacked authentication controls. Wiz said there was no evidence the exposed data was exploited before it was taken down. Wiz also pointed to development practices, including heavy reliance on AI-assisted coding, that may have contributed.
What happened
What was done
“secured the data within hours”
No later incident for Moltbook under this risk on record.
Risks
Primary63 incidents
Rising: 5 vs 2.2 a week
Sorted by rule from the case's fields; not yet read from the sources.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
HarnessTool allow-list · Fail-closed defaults · Stop control
ApplicationHuman approval for high-impact actions · Change review and separation of duties · Least-privilege access for the agent · Production kept apart from test · Activity logs · Adversarial testing before deployment
Infrastructure / targetEvidence
- Cause a shared system was the path
No source states: what it reached or did, when it happened, when it was found, the direct loss, a count of the other parties affected, any court case, what set it off.
Show the full account: 1 items from the primary sources
What happened, in order
Not dated in the sources:
- Wiz gave Moltbook details immediately and the team secured the data within hours.
Show every field, with its source and grade
The AI system
What happened
Impact
Context
Notes on gaps
Engadget says thousands of human users were affected while Wiz gives 35,000 email addresses; both are kept as stated. Mapping the authentication gap to J2 and treating the fix as adding J2 are my inferences, as the sources do not name controls. Wiz's vibe-coding point is reported as a possible contributor, not a confirmed cause. Reversibility is unknown.
LR-2026-0418 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON