In July 2025, a vibe-coded social app called Tea exposed 13,000 government IDs and 1.1 million private DMs through an unsecured Firebase bucket. The same architecture ships under HIPAA jurisdictions every week, with patient records in the bucket instead of selfies.
We pulled together every public AI-built-app security disclosure we could find, mapped them against the H...