A new app created to identify and report critics of conservative activist Charlie Kirk has unexpectedly put its own users at risk, raising serious questions about privacy and online security.
Backfired Mission
The app, called Cancel the Hate, was promoted as a tool for exposing people who criticized Kirk. Users were encouraged to submit personal details about individuals they believed had made negative comments about the activist.
However, instead of targeting its intended subjects, the app exposed its own users’ information.
Security Flaw Revealed
A security researcher discovered a vulnerability that allowed access to users’ email addresses and phone numbers. The flaw reportedly affected at least 140 accounts, including a test account from a news outlet.
The breach also enabled the deletion of user accounts and could have allowed further misuse of personal data.
App Removed After Leak
Following the discovery, the app was taken offline, and the creator’s associated social media accounts were deleted. In its short life—just 30 hours—the app had reportedly collected over 38,000 submissions.
Privacy Concerns
The incident highlights the risks of apps that gather sensitive information, particularly for political purposes. Experts emphasize the need for strong security measures to protect user data and caution against platforms that encourage reporting or targeting individuals.
This episode serves as a cautionary tale about how tools intended to “call out” others online can quickly turn against their own users if security is not properly handled.