RedAccess researchers identified approximately 380,000 publicly accessible applications built on AI-assisted ‘vibe coding’ platforms, including Lovable, Base44, Replit, and Netlify, with roughly 5,000 confirmed to expose sensitive corporate and personal data. The root cause is insecure default configurations that publish apps openly unless developers explicitly change privacy settings, a design assumption that fails non-technical builders who lack security hygiene awareness. This exposure signals a systemic risk emerging from the democratization of app development: as AI lowers the barrier to building software, it simultaneously widens the attack surface for data harvesting at scale.