Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone

Anthropic’s Claude Code reportedly found 214,856 files linked to deleted photos and videos on a Google Pixel, raising privacy concerns about Android photos.

The user, known as Cooler (@coolerwave), said files remained in a hidden thumbnail folder even after the original images were permanently deleted. This claim is unverified and cannot be confirmed as an Android security flaw.

According to a post Cooler (@coolerwave) shared on X, the user connected the Pixel to a MacBook and asked Claude Code to search for leftover media. The tool reportedly identified DCIM/.thumbnails, a hidden folder containing image previews.

Claude Code Finds Deleted Photos

Most files were described as compressed copies, while several dozen were said to be close to their original size. The user claimed the files included passport images, bank screenshots, private photographs, and a cryptocurrency seed phrase. The account also said many items were absent from the gallery trash and MediaStore, Android’s media index.

However, the material reviewed does not establish that every counted file represented a unique, previously deleted photo or video. The distinction between a cached preview and an original file matters. Android supports loading thumbnails so apps can display smaller previews instead of full media files.

Finding a preview would not, by itself, show that Claude Code recovered the original photograph or a playable deleted video.

A count of 214,856 files also needs context. A reliable review would need to separate unique images, repeated previews, database files, and other cached content. Without that breakdown, the headline figure should be treated as the user’s reported result, not a verified recovery total.

The story follows another reported AI discovery covered by Cyber Security News, in which Claude identified a suspected hidden cryptocurrency miner on a Mac. Such reports show interest in AI-assisted checks, but individual findings still need independent validation.

The post’s claim that any app with storage access can read every deleted image is too broad. Android’s scoped storage rules limit file access, with scoped storage required for apps targeting Android 11 or higher.

Actual access depends on the Android version, app permissions, and file location. Android 14 also introduced selected photo access, allowing users to share specific images rather than their entire library.

Separately, the special MANAGE_EXTERNAL_STORAGE permission grants broad access to shared storage, but does not unlock other apps’ protected directories. Ordinary photo permission and “All files access” are therefore not interchangeable.

That distinction matters because excessive permissions can create real risks. Cyber Security News previously covered Android spyware posing as WhatsApp and Google Photos, which used granted privileges to support surveillance and data theft.

Users should review photo permissions and special all-files access, removing access that does not match an app’s purpose. Selected-photo sharing offers a narrower option where supported. Cloud copies need separate attention. Google explains that its “Free up space” feature removes local copies while keeping backed-up images available in Google Photos.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post Claude Code Reportedly Finds 214,856 Deleted Photos and Videos Hidden on Android Phone appeared first on Cyber Security News.