META'S 'PRIVATE' AI APP LEAKED 6,800 CHATS — ONE QUERY FOUND THEM ALL

Security firm Claroc found more than 6,800 shared Meta Muse conversation links in public passive-DNS records — no hacking required. Muse builds each share's web address from the conversation's own title plus a random ID, and DNS lookups get recorded and kept searchable. One query was all it took.

The chats Claroc opened included a small-business loan application, a bank fraud alert with partial account details, a CEO-only revenue review, and a candidate's notes for a confidential AI-lab call — all loading with no Meta login. Meta paused Muse link sharing on October 20 and says it is reviewing how the links get discovered.