Two apps from developer Codeway on the Google Play Store have leaked 12TB of user data, including over 1.5 million images, after a misconfigured cloud storage setup. The apps, including the Video AI Art Generator, collected 8.27 million files since June 2023, exposing sensitive KYC details from the IDMerit app. Researchers found 72% of analyzed apps have similar vulnerabilities stemming from hardcoded secrets in their code, raising urgent security concerns.