Incident 1176: Microsoft's Windows Recall Allegedly Stores Passwords and Social Security Numbers in Preview Mode

Description: Microsoft's Windows Recall, an AI-powered screenshot and retrieval tool for Copilot+ PCs, was allegedly still capturing sensitive information such as passwords, Social Security numbers, and bank details despite a built-in "filter sensitive information" feature. Independent testing reportedly found the filter failed in multiple cases. Microsoft reportedly classified Recall as a preview feature and said improvements were in progress.

Tools

New Report New Response DiscoverView History

Entities

View all entities

Alleged: Microsoft , Windows Recall filter sensitive information feature , Windows Recall and Windows 11 developed and deployed an AI system, which harmed Windows Recall users , Windows 11 users and Microsoft users.

Alleged implicated AI systems: Windows Recall filter sensitive information feature , Windows Recall and Windows 11

Incident Stats

Incident ID

1176

Report Count

Incident Date

2025-08-01

Editors

Daniel Atherton

Applied Taxonomies

MIT

MIT Taxonomy Classifications

Machine-Classified

Taxonomy Details

Risk Subdomain

2.1. Compromise of privacy by obtaining, leaking or correctly inferring sensitive information

Risk Domain

Privacy & Security

Entity

Timing

Post-deployment

Intent

Unintentional

Incident Reports

Reports Timeline

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

theregister.com

Microsoft's Windows Recall is reportedly still capturing passwords and Social Security numbers even after its relaunch

tomsguide.com

theregister.com · 2025

exclusive Microsoft Recall, the AI app that takes screenshots of what you do on your PC so you can search for it later, has a filter that's supposed to prevent it from screenshotting sensitive info like credit card numbers. But a The Regist…

tomsguide.com · 2025

The controversial Microsoft Windows Recall AI app may still be in need of security work according to testing from the UK technology site, The Register.

The app, which takes screenshots of everything you do on your PC so you can find it late…

Variants

A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.

Seen something similar?

Similar Incidents

By textual similarity

Did our AI mess up? Flag the unrelated incidents

Identical Twins Can Open Apple FaceID Protected Devices

Similar Incidents

By textual similarity

Did our AI mess up? Flag the unrelated incidents

Incident 1176: Microsoft's Windows Recall Allegedly Stores Passwords and Social Security Numbers in Preview Mode

Tools

Entities

Incident Stats

MIT Taxonomy Classifications

Incident Reports

Reports Timeline

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

Microsoft's Windows Recall is reportedly still capturing passwords and Social Security numbers even after its relaunch

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

Microsoft's Windows Recall is reportedly still capturing passwords and Social Security numbers even after its relaunch

Variants

Similar Incidents

By textual similarity

Identical Twins Can Open Apple FaceID Protected Devices

Hackers Break Apple Face ID

Game AI System Produces Imbalanced Game

Similar Incidents

By textual similarity

Identical Twins Can Open Apple FaceID Protected Devices

Hackers Break Apple Face ID

Game AI System Produces Imbalanced Game