AI girlfriend review site’s secrets were exposed to the world for three weeks
An AI companion review website, Intimeros, accidentally left a redesign test site publicly accessible for three weeks after password protection was disabled for a client demonstration. The incident matters because the exposed site was indexed by Google and connected to the live production database, allowing outsiders potentially to view unpublished editorial material and infer the company’s strategy.
No user data was exposed, but visitors could access draft reviews, pricing information and private notes on AI companion services. Intimeros restored access controls, blocked indexing, changed system keys and introduced weekly scans; the case highlights the need to secure staging sites as rigorously as live websites.
- A test site exposed unpublished Intimeros editorial material for three weeks.
- Google indexed the unprotected staging domain.
- No user data leaked, but competitors could have gained strategic insight.
New here? Start with this
AI companion sites offer chat and other interactions with computer-generated partners. Intimeros is a website that reviews these services, helping readers compare what they offer and how much they cost.
Websites often use test versions to try out redesigns before making changes public. These versions may contain draft articles, pricing details or internal notes, so access controls matter even when no customer information is involved.
The case raises questions about how companies protect unfinished work and business plans online. A test site linked to a live database can reveal more than its appearance suggests, particularly if search engines can find it.