ModerateConfirmedDigital services
Google had been sending a transparency partner, identified as "Project L", copies of takedown requests filed by victims of non-consensually distributed sexual images. That partner published identifying details from those requests online, in multiple languages (English, Japanese, Spanish, Portuguese), including victims' names, ages, employers, phone numbers, and descriptions of the abuse. First revealed in South Korea, the case also involves victims in other countries, including a reported case in Brazil concerning childhood photos. Google attributes the disclosures to human error in its request-handling process.
The published details allow a named sex-crime victim to be linked to the abusive content itself, creating a risk of harassment or renewed exposure.
- Disclosed on
- September 11, 2026
- Sector
- Digital services
- Country
- United States
- Cause
- Misconfigured database
Exposed data
- Full name
- Phone number
- Employment data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Not just Korea: Google leaked identifying info for sex crime victims across the worldDataBreaches.net
- Google Issues Apology for Leaking Digital Sex Crime Victims' Information: 'Deeply Aware of the Gravity'SBS News
- Korea demands years of Google records over sex-crime victim data exposureThe Korea Times
- Korea Weighs Criminal Complaint Against Google Over Leak of Sex Crime Victims' DataSeoul Economic Daily
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact