Aspire News, an app designed to assist domestic violence victims, has suffered a data breach with recordings from victims found on unsecured cloud storage.

The breach was discovered by Noam Rotem and Ran Locar at vpnMentor, which revealed it today. The data on the misconfigured Amazon Web Services Inc. S3 bucket included more than 4,000 voice recordings along with victim details, home addresses, the nature of their emergency and their location when making the report.

Aspire News is designed to appear to be a legitimate news app but also includes an emergency help section that allows domestic violence victims to send help messages to a trusted contact person. The app was designed by When Georgia Smiled, a nonprofit founded by TV personalities Robin McGraw and Dr. Phil.

The exposed data was discovered June 24, with Rotem and Locar notifying both When Georgia Smiled and Amazon, the latter because of the sensitive nature of the data exposed in the S3 bucket. AWS responded the same day, saying it had informed its client and taken the database offline.

When Georgia Smiled, Dr. Phil or Robin McGraw have not commented publicly on the news.

“The Aspire News app, designed to protect domestic violence victims, has done the opposite by exposing users’ pre-recorded voice notes alerting friends and family of their dangerous situation,” Robert Prigge, chief executive officer of identity verification solutions provider Jumio Corp., told SiliconANGLE. “Due to a missing server password, victims’ safety was put at risk, giving access to users’ pre-recorded messages that could contain personally identifiable information.”

The news follows the publication of data stolen from hundreds of police departments across the U.S. in a hack dubbed BlueLeaks. That hack saw the publication of details of victims of crime along with witnesses and other protected people, putting their lives at risk.

Image: Dr. Phil