Lovable: CEO Apologizes After Security Breach Revealed

Anton Osika, the CEO of the Swedish startup Lovable, which specializes in vibe-coding, has issued an apology following a security incident that raised concerns about user data protection. An anonymous user claimed on X that they could access chat histories and personal information of other customers after creating a free account. This post went viral, garnering over 500,000 views, and alleged that "every conversation" with Lovable's AI was "stored and readable."

Although Lovable denied any data breach, the company acknowledged shortcomings in its communication regarding the visibility of user data. The issue, which allowed access to chat messages related to public projects, has since been resolved.

In a statement on LinkedIn on Wednesday, Osika explained that the company became aware of the issue through social media, as its vulnerability disclosure process had "failed," delaying its response. He admitted that some product decisions seemed "disconnected from user expectations."

"We have worked hard on this issue over the past year, and when incidents like this occur, it shows me that there is still a long way to go," he wrote. "We will therefore do more and communicate better about it."

This incident comes at a delicate time for the Stockholm-based startup, which has recently accelerated an update to its desktop product in response to signs that the American AI company Anthropic was developing a competitor.

Osika stated that Lovable will now focus its efforts on strengthening its security and communication processes. "Lovable should be the safest place to build," he concluded.