Overview
Severity: CRITICAL | Affected: NexusAI | Category: breach
NexusAI, a leading provider of enterprise AI solutions, confirmed a massive data breach exposing over 50 million user records. The breach includes full prompt histories, API keys, and sensitive proprietary data used for model fine-tuning by their corporate clients. Attackers exploited a zero-day vulnerability in a third-party data logging and monitoring tool integrated into NexusAI's infrastructure. This incident highlights the significant supply chain risks in the AI ecosystem and raises serious concerns about the confidentiality of data processed by large language models. The company has notified affected customers and is working with cybersecurity firms to investigate the full extent of the breach. Leaked data has reportedly appeared on dark web forums, posing a severe risk of intellectual property theft and further targeted attacks against NexusAI's customers.