AI company Clarifai has deleted 3 million profile photos it obtained from dating site OkCupid in 2014 for facial recognition training. The deletion follows an FTC settlement with Match Group, OkCupid's parent company, over privacy policy violations.
Clarifai certified the data deletion to the FTC in April, more than a decade after the photos were initially scraped from the dating platform without user consent. Match Group violated its own privacy policies by allowing the photo collection, which was used to train Clarifai's facial recognition algorithms.
The settlement between the FTC and Match Group remains undisclosed in terms of financial penalties. The case highlights ongoing tensions between AI companies seeking training data and user privacy protections.
OkCupid users were not notified that their images had been collected or used for AI development. The incident underscores broader concerns about how personal data from social platforms and dating sites may be repurposed for machine learning without explicit consent.
Clarifai's deletion represents a rare instance of an AI company being forced to remove improperly obtained training data, though critics note the lengthy delay between initial collection and removal.
Federal prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting services with facilitating cyberattacks and money laundering that victimized cybercrime targets of $62 million.
A hacker accessed Suno's source code using stolen employee credentials, revealing that the AI music generator scraped decades of audio from YouTube to train its model.
Criminals can now clone voices with AI in mere seconds, outpacing traditional authentication defenses that banks and financial institutions rely on to prevent fraud.
Five malicious versions of AsyncAPI packages were published to npm, delivering a remote access trojan capable of stealing credentials and sensitive data from developer systems.