Regulatory updates
Asana AI leak
June 18, 2025
Asana's new AI feature, MCP, accidentally exposed customer data across organizations due to a logic flaw—not a hack. The issue lasted from May 1 to June 4, affecting about 1,000 organizations. Exposed data included tasks, projects, comments, and attachments. Asana disabled the feature, fixed the bug, and is notifying affected users. They recommend reviewing AI-generated content and pausing MCP use for now.