GenNomis AI image generator exposed an open database of prompts and generated images

What happened

Researcher Jeremiah Fowler found an unprotected, unencrypted database belonging to South Korean AI image service GenNomis. It stored the prompts and images users generated, including illegal AI-generated abuse material and non-consensual deepfakes.

Impact

About 93,000 files totaling roughly 47GB, including prompts and generated images, were left publicly accessible without any password.

How this could have been prevented

Generative-media platforms must secure output storage and enforce abuse controls, since an open datastore both leaks data and evidences illegal content creation.

Sources

More data leakage incidents

Autonomous AI agent breached McKinsey's Lilli platform in two hours Anthropic leaked Claude Code's full source via an npm source-map packaging bug ChatGPT DNS covert channel let a single prompt exfiltrate conversation data

Would runtime governance have caught this?

Guardion enforces policy on every agent action inline — with visibility, tamper-evident evidence, and DLP for agents and MCPs.

Request a demo