This Google Chrome extension has been silently stealing every AI prompt its users enter (www.techradar.com)

A recent investigation has uncovered that the popular Urban VPN Proxy Chrome extension, with over six million installations, has been covertly collecting users' AI prompts and responses since a July 2025 update. This extension, originally designed to secure user privacy by masking IP addresses, now harvests extensive data, including conversation identifiers and timestamps, from leading AI platforms like ChatGPT, Microsoft Copilot, and Google Gemini. The collected data is then shared with BIScience, an affiliated ad analytics company, raising significant concerns about user privacy and data security. The implications of this discovery are profound for the AI/ML community, as it highlights potential vulnerabilities in the tools that many rely on for sensitive interactions. Despite Urban Cyber Security's claims of anonymizing data and filtering personal information, researchers emphasize the risk of unintentionally sharing sensitive content. Moreover, related extensions from the same company, such as 1ClickVPN Proxy and Urban Browser Guard, appear to be engaged in similar data harvesting practices. This situation underscores the necessity for greater transparency and more stringent privacy regulations concerning third-party applications that integrate with AI technologies.