Deleted photos and financial data found in smartphone caches

A security researcher has discovered a vulnerability in mobile devices that allows for the recovery of deleted data.

The hidden iPhone cache contains photos deleted over the past three years.

Recovered data included screenshots of bank statements, passport details for visa applications, and a crypto wallet seed phrase. These files remain accessible via the Claude Code analysis tool, despite the user's attempt to completely delete them.

On Android devices, the issue manifests differently: the front-facing camera captures the owner without their knowledge.

Over the last 15 months, the system has saved more than 14,000 images of the owner's face. Photos were taken at home, on trains, and even during moments when simply checking the time. The images contain metadata, including GPS coordinates and timestamps, which are absent from the main gallery.

The vulnerability affects both iOS and Android platforms, creating risks of personal information and financial data leaks for users.