ClarityCheck people-finder left millions of face photos exposed, likely without their knowledge

ClarityCheck, a facial recognition people-finder tool, exposed approximately 9 million unencrypted face photos on a public cloud server for months, likely uploaded without user consent, creating significant identity theft and fraud risks. This breach highlights critical vulnerabilities in data security practices and the regulatory risks associated with facial recognition tools, particularly concerning unauthorized biometric data collection and storage. IT organizations must urgently review their data exposure controls, implement encryption and access management standards, and ensure compliance frameworks address third-party vendor security risks.