Lovable apps expose passport details and more than 200K private messages

Re:Lovable apps expose passport details and more than 200K p... by jacquesm on Saturday November 14, 2026 @06:06PM (#50501986)

That, and 280 or so company reviews, conversations with compliance officers, CISOs, auditors, pentesters, lawyers and other people in the M&A space about how those companies deal with security issues, reports and what constitutes a potential breach and what does not.

As for the absolute facts of the law: the only law I currently have in mind is the GDPR and that is a surprisingly readable piece of legislation.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by akerl_ on Saturday November 14, 2026 @06:08PM (#50502005)

So I should expect a news post about Lovable owing GDPR fines for failure to disclose a breach any day now?

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by jacquesm on Saturday November 14, 2026 @06:16PM (#50502079)

Quite possibly. If you are a data subject affected by this affair you can contact your local DPA.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by akerl_ on Sunday November 15, 2026 @09:14AM (#50507083)

And if I don’t see fines against Lovable and they don’t report this as a breach, it would seem to suggest that your stance across this post isn’t the degree of absolute fact you’ve presented it as?

[ Parent | on HN ]