Popular Chrome Browser Extension Found Intercepting Millions of Users’ AI Conversations
Security researchers discovered that a widely installed Chrome extension was capturing and transmitting AI chat data without clear user awareness.
Discovery of the Data Interception
Security researchers recently uncovered a serious privacy issue involving a featured Chrome browser extension. The extension, widely promoted for productivity and AI-related enhancements, had access to millions of users. As a result, a large volume of AI chat conversations became exposed.
During analysis, researchers observed that the extension monitored interactions with popular AI chat platforms. Instead of limiting processing to the user’s device, it transmitted chat content to external servers. Consequently, sensitive prompts and AI-generated responses left the browser environment.
How the Extension Collected AI Chats
The extension injected scripts into web pages that hosted AI chat interfaces. Therefore, it could read user inputs and AI responses in real time. Each interaction triggered background network requests that sent the data to third-party endpoints.
Although the extension’s documentation mentioned data collection, it failed to explain the extent of AI chat interception. Moreover, it did not clearly describe how long the data remained stored or how it was protected. This lack of transparency raised significant concerns.
Privacy and Security Risks
AI chat conversations often contain confidential information. Users frequently share internal business data, credentials, and personal details. As a result, interception of these conversations creates serious privacy and compliance risks.
If attackers access the collected data, they could exploit it for account compromise, targeted phishing, or corporate espionage. Additionally, organizations using AI tools internally face elevated risk when employees install unvetted extensions.
What Users and Organizations Should Do
Security experts recommend reviewing all installed browser extensions immediately. Users should remove extensions that request broad permissions or lack clear privacy disclosures. Furthermore, organizations should restrict extension installation through endpoint and browser management policies.
Users should also favor extensions from trusted vendors only. At the same time, developers must adopt transparent data-handling practices. Without these changes, browser extensions will continue to pose hidden security risks.