Summary

• Lovable is the dominant entity in the topic, with repeated reports of chat and project-data exposure tied to its AI coding platform.
• The recurring technical problem is access control: public-project visibility, backend permission changes, and authorization flaws allowed unintended access to user data.
• The evidence points more to configuration and disclosure failures than to a single isolated breach event, with multiple accounts describing the same underlying privacy weakness.
• Lovable responded by reverting changes, restricting access to public-project chat data, and changing visibility defaults and documentation.
• Security response and disclosure processes became part of the story, including a HackerOne report, social-media discovery, and promises to improve communication and testing.
• Enterprise use matters because the platform is used by companies such as Uber and Deutsche Telekom, raising the significance of privacy misconfiguration beyond individual users.