Browser extensions with 8 million users collect extended AI conversations

Ars Technica reports that browser extensions with over eight million installs are harvesting complete AI conversations and selling them for marketing analytics, according to data collected from Google’s and Microsoft’s extension stores. The investigation identified eight extensions, seven of which carry Featured badges, and found that their scripts route all browser–AI interactions through an injector rather than legitimate browser APIs.

According to Koi, the extensions aggregate every prompt, response, timestamp, session metadata and the specific AI platform used, and they continue harvesting even when VPN, ad blocking or other features are disabled. The data collection began in early July with Urban VPN Proxy version 5.5.0, and the firm says anyone using targeted platforms after 9 July 2025 should assume those conversations have been shared with third parties.

Collectively the extensions have been installed more than 8 million times across Chrome Web Store and Edge add-ons, including Urban VPN Proxy with 6 million Chrome users and 1,32 million Edge users, plus smaller counts for other variants. The eight extensions and their privacy policies are all linked to Urban Cyber Security, with BiScience listed as an affiliated company and marketing analytics as a stated purpose in their terms.