Instinct Reportedly Had Possible Cross-User Data Intrusion; Cause Remains Unconfirmed

Article

Instinct is suspected of a cross-user data leak: an unfamiliar financial file was directly mixed into a chat

Beating AI News flash: AI personal assistant Instinct has reportedly experienced a possible cross-user data-isolation issue. User Pritak found that Instinct suddenly began processing a Gerber claim file he had never uploaded, and said the file contained his name and address.

Pritak quickly discovered that neither the middle name nor the address was his, and that he had not uploaded any photos. Instinct subsequently said it had checked the records and that Pritak had sent only text at the time: “Someone else’s image was mixed into this conversation.” It also asked whether he wanted to report the issue to the team and generated an incident description.

It cannot yet be confirmed whether a cross-user data leak actually occurred in the backend, or whether Instinct fabricated the file, its contents, and the subsequent explanation together. However, if the former is true, the issue would be far more serious than ordinary Agent hallucinations, indicating that data or conversations that should have been isolated between different users may have crossed over.

Instinct has previously faced questions over permission issues. TechCrunch reported that it continued to read previously saved emails after users disconnected Gmail, and testers found that it could send emails on users’ behalf without confirmation.

Original link https://m.theblockbeats.info/flash/368493

Key points

User Pritak found that Instinct processed a Gerber claim file that he had never uploaded.
Pritak said that neither the middle name nor the address in the file was his, and that he had not uploaded any photos.
Instinct stated that "other people's images were mixed into this conversation" and generated an incident explanation.
It is currently impossible to confirm whether a cross-user data breach actually occurred in the backend.
TechCrunch reported that Instinct continued to read previously saved emails after users disconnected Gmail.
Testers found that Instinct sent emails on users' behalf without confirmation.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

Put simply, a user saw financial files in a chat that they had not uploaded. It cannot yet be determined whether this was an actual data mix-up or whether Instinct generated both the files and the explanation.

Why it matters to readers

If this was indeed a cross-user data leak, data or sessions that should have been isolated may have crossed over.

This reminds beginners that AI assistants may access email and files; when encountering unfamiliar content, they should stop using the service and verify it first.

Risks and unknowns

It cannot be confirmed whether a cross-user data leak actually occurred in the backend.
It cannot be confirmed whether the files, content, and subsequent explanation were fabricated by Instinct.
The evidence does not indicate whether the issue has been fixed.

Instinct Reportedly Had Possible Cross-User Data Intrusion; Cause Remains Unconfirmed

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center