Over 181,000 AI meeting recordings left wide open in note taking app

A critical security vulnerability in tl;dv, an AI meeting recording platform used by over 2 million users, exposed 181,874 meeting records with zero tenant isolation, allowing any authenticated user to access sensitive meeting metadata from governments (23 countries), universities, and Fortune 500 companies—and in some cases, join live calls uninvited. The vendor failed to respond to disclosure for six months despite the exposure of trade secrets, strategy sessions, and confidential government communications, creating severe compliance, legal, and reputational risks for affected organizations. This incident underscores a critical gap in SaaS security vetting and highlights the urgent need for IT organizations to audit third-party recording and transcription tools for proper access controls and tenant isolation.