Where Sources Agree

• arrows_inputAI Chatbots Expose PII: Sources align on AI chatbots exposing real phone numbers and home addresses, noting this often stems from personally identifiable information (PII) in their training data, according to MIT Technology Review and city property records.
• arrows_inputFraudsters Inject Fake Numbers: Sources uniformly report criminals exploit AI chatbots by injecting fake customer service numbers into large language models; this tactic has served millions of Brits with fraudulent contacts, according to Reddit posts and a Virgin Media O2 report.
• arrows_inputAI PII Removal Difficulty: Sources verify AI models cannot simply unlearn Personally Identifiable Information (PII), with no easy way to remove or verify such data, according to OpenAI and Google spokespersons.

Where Sources Disagree

• arrows_outputChatbot PII Disclosure Type: Some chatbots, such as Grok and Claude, demonstrate guardrails by refusing to provide a user's own phone number. However, others like ChatGPT and Gemini readily disclose personal information for other individuals or use numbers as placeholders.
• arrows_outputPII Exposure Mechanisms: Some reports indicate PII exposure originates from the retrieval of old, publicly available data in training sets, like past FOIA requests. However, security experts also identify numbers used as placeholders or injected by criminals.