AI Tool Claude Recovers 214,856 Deleted Photos From Android Phones

Key Takeaways

• An AI tool, Claude Code, reportedly identified over 200,000 files associated with deleted media on an Android Pixel device.
• The files were found in a hidden thumbnail directory, raising questions about data persistence after deletion.
• The discovery highlights potential privacy implications, though the extent of actual data recovery and accessibility by malicious apps remains unverified.
• Android’s scoped storage and newer granular permissions significantly restrict app access to user data, mitigating some of the stated risks.

A recent report details how Anthropic’s AI tool, Claude Code, allegedly uncovered 214,856 files linked to previously deleted photos and videos on a Google Pixel smartphone. This finding has sparked discussions regarding data privacy on Android devices and the persistence of seemingly erased content.

The user, identified as Cooler (@coolerwave), claimed that these files, primarily thumbnail previews, persisted in a hidden folder even after the original images were permanently removed. While intriguing, this assertion of an Android security flaw has not been independently verified.

The Discovery Process

According to Cooler’s post on X, the process involved connecting the Google Pixel to a MacBook and instructing Claude Code to scan for residual media files. The AI reportedly pinpointed the DCIM/.thumbnails directory, a hidden folder known to store image previews. This directory contained the unexpectedly high number of files.

Claude Code found 214,856 photos and videos I permanently deleted from my Android.

Three years of deleted photos and videos still sitting in a hidden cache. Any app with storage access can read them.

After the iPhone post I plugged my Pixel into the MacBook and asked Claude… https://t.co/6KCcOJiZ0N pic.twitter.com/14Mksn5deJ

— Cooler (@coolerwave) October 25, 2026

Claude Code’s Reported Findings

The majority of the recovered files were described as compressed copies, though a smaller number were reportedly close to their original resolution. Cooler asserted that this cache included sensitive data such as passport images, bank screenshots, personal photographs, and even a cryptocurrency seed phrase. The user also noted that many of these items were not present in the gallery’s trash bin or Android’s media index, MediaStore.

It is important to contextualize these findings. The provided information does not definitively confirm that every counted file represents a unique, fully recoverable original photo or video. The distinction between a cached preview and a full-sized original file is crucial. Android systems frequently generate thumbnails to enable applications to display smaller previews efficiently without loading full media files.

Therefore, merely finding a preview does not automatically mean that Claude Code successfully recovered the original, high-resolution photograph or a playable deleted video. Furthermore, the reported figure of 214,856 files requires further breakdown. A comprehensive analysis would need to differentiate between unique images, redundant previews, database entries, and other cached content. Without such a detailed classification, the reported number should be considered the user’s unverified finding rather than a confirmed total of recovered, deleted media.

This incident follows another reported AI-assisted discovery where Claude allegedly identified a hidden cryptocurrency miner on a Mac. Such accounts underscore the growing interest in leveraging AI for security analyses, but individual findings consistently necessitate independent validation to confirm their scope and implications.

Android’s Security Architecture and Data Access

The claim that “any app with storage access can read every deleted image” is an oversimplification. Android’s scoped storage rules, mandated for apps targeting Android 11 and later, significantly restrict an application’s access to the file system. Access is generally limited to an app’s own directory and specific media types it creates or that the user explicitly grants access to.

Actual file access depends on several factors, including the Android version in use, the specific permissions granted to an app, and the exact location of the file. Android 14 further enhanced user privacy by introducing selected photo access, allowing users to grant permission for an app to view only specific images rather than their entire media library.

While the special MANAGE_EXTERNAL_STORAGE permission grants extensive access to shared storage, it does not bypass the protections afforded to other applications’ private directories. Consequently, standard photo permissions are not equivalent to “All files access,” and this distinction is vital for understanding potential risks.

Mismanaged or excessive permissions can indeed pose significant security risks. Previous reports have highlighted instances of Android spyware, disguised as legitimate applications like WhatsApp or Google Photos, leveraging broad permissions to facilitate surveillance and data exfiltration.

What You Should Do

• Review App Permissions: Regularly check and adjust photo and file access permissions for all installed applications. Grant only the necessary permissions that align with an app’s core functionality.
• Utilize Selected Photo Access: On Android 14 and newer, use the “Selected photos” option to grant apps access to only specific images, rather than your entire photo library, whenever possible.
• Understand Cloud Storage: Be aware that features like Google Photos’ “Free up space” feature remove local copies but retain backed-up images in the cloud. Manage cloud backups separately according to your privacy preferences.
• Exercise Caution with AI Tools: While AI-assisted analysis can be powerful, treat any findings from such tools as initial reports requiring independent verification, especially concerning sensitive data.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.