{
  "id": "NP-01-browser-pii-anonymization-chrome-extension-ai-chat",
  "type": "case-study",
  "title": "Stolen AI Chats: Why Browser-Level PII Anonymization Beats Post-Breach Response",
  "description": "How browser-level PII anonymization prevents AI chat data theft. Chrome extension intercepts personally identifiable information before it reaches AI services.",
  "url": "https://anonym.community/anonym.legal/NP-01-browser-pii-anonymization-chrome-extension-ai-chat.html",
  "product": "anonym.legal",
  "driver": {
    "id": null,
    "name": ""
  },
  "breadcrumbs": [
    {
      "label": "Dashboard",
      "url": "https://anonym.community/../dashboard.html"
    },
    {
      "label": "anonym.legal",
      "url": "https://anonym.community/index.html"
    }
  ],
  "content": {
    "sections": [
      {
        "type": "summary",
        "heading": "Research Source",
        "content": "anonym.community March 2026 crawl\n\nMalicious Chrome extensions harvest AI chat histories (ChatGPT, Claude, Gemini) containing PII that users pasted into conversations. The attack vector exploits browser extension permissions to read DOM content across AI chat interfaces, exfiltrating conversation histories that contain names, addresses, financial data, and medical information."
      },
      {
        "type": "summary",
        "heading": "Executive Summary",
        "content": "Malicious browser extensions can silently capture everything typed into AI chat interfaces. The only defense that works is anonymizing PII before it enters the chat — not trying to recover it after a breach.\n\nanonym.legal's Chrome Extension anonymizes PII directly in the browser before it reaches any AI service, eliminating the data that malicious extensions seek to steal."
      },
      {
        "type": "problem",
        "heading": "The Problem: The Browser Extension Attack Surface",
        "content": "Chrome extensions with broad permissions can read and exfiltrate content from any webpage, including AI chat interfaces. Users routinely paste documents containing names, addresses, Social Security numbers, medical records, and financial data into ChatGPT, Claude, and other AI services. A malicious extension capturing this content obtains PII in plaintext — the same PII that regulations like GDPR and HIPAA require organizations to protect.\n\nIrreducible truth: Post-breach response cannot un-expose PII. Once a malicious extension reads plaintext personal data from an AI chat, no incident response plan can make that data private again. The only effective control operates before the data enters the browser DOM.",
        "atomicTruth": "Irreducible truth: Post-breach response cannot un-expose PII. Once a malicious extension reads plaintext personal data from an AI chat, no incident response plan can make that data private again. The only effective control operates before the data enters the browser DOM."
      },
      {
        "type": "solution",
        "heading": "The Solution: How anonym.legal Addresses This",
        "content": "The anonym.legal Chrome Extension (v1.1.37, Manifest V3) intercepts text in AI chat input fields before submission. It detects 285+ entity types including names, email addresses, phone numbers, credit card numbers, and government IDs. PII is replaced with anonymized tokens (e.g., [PERSON_1], [EMAIL_ADDRESS_1]) before the message reaches the AI service.\n\nFor workflows requiring the original data, AES-256-GCM encryption replaces PII with encrypted tokens. The encryption key never leaves the user's browser. The AI service processes anonymized text; the user decrypts the response locally.\n\nChatGPT (ProseMirror editor, execCommand('insertText')) and Perplexity (Lexical editor) are fully supported with 10/10 test coverage. Claude, Gemini, and DeepSeek have partial support."
      },
      {
        "type": "compliance",
        "heading": "Compliance Mapping",
        "content": "This pain point intersects with GDPR Article 32 (security of processing), GDPR Article 33 (breach notification within 72 hours), and CCPA data breach provisions. Pre-send anonymization eliminates the breach scenario entirely.\n\nanonym.legal's GDPR, HIPAA, PCI-DSS, ISO 27001 compliance coverage, combined with Hetzner Germany, ISO 27001 hosting, provides documented technical measures organizations can reference in their compliance documentation."
      },
      {
        "type": "specifications",
        "heading": "Product Specifications",
        "specs": {
          "Entity Types": "285+",
          "Detection": "3-layer hybrid: Presidio + NLP + Stance classification",
          "Test Coverage": "100% (419/419 tests)",
          "Languages": "48",
          "Anonymization Methods": "Replace, Redact, Mask, Hash (SHA-256/512), Encrypt (AES-256-GCM)",
          "Platforms": "Web App, Desktop, Office Add-in, Chrome Extension, MCP Server, REST API",
          "Pricing": "Free €0, Basic €3, Pro €15, Business €29",
          "Hosting": "Hetzner Germany, ISO 27001",
          "Compliance": "GDPR, HIPAA, PCI-DSS, ISO 27001"
        }
      }
    ]
  },
  "relatedLinks": [
    {
      "label": "NP-02: Discord E2EE Text Gap: PII Anonymization",
      "url": "NP-02-discord-e2ee-text-gap-pii-anonymization.html"
    },
    {
      "label": "NP-04: Securing MCP Servers for PII Processing",
      "url": "NP-04-mcp-server-security-pii-processing.html"
    },
    {
      "label": "NP-05: Anonymize Code Context Before AI Processing",
      "url": "NP-05-cursor-ide-privacy-mode-anonymize-code-context.html"
    },
    {
      "label": "NP-08: Blocking vs. Anonymization: Nightfall DLP",
      "url": "NP-08-blocking-vs-anonymization-nightfall-dlp.html"
    },
    {
      "label": "NP-10: Reversible Encryption for LLM Workflows",
      "url": "NP-10-reversible-encryption-llm-workflows-production.html"
    },
    {
      "label": "NP-12: Shadow AI and the Copy-Paste Problem",
      "url": "NP-12-shadow-ai-copy-paste-pii-violations.html"
    },
    {
      "label": "anonymize.solutions Case Studies",
      "url": "../anonymize.solutions/index.html"
    },
    {
      "label": "cloak.business Case Studies",
      "url": "../cloak.business/index.html"
    },
    {
      "label": "anonym.plus Case Studies",
      "url": "../anonym.plus/index.html"
    },
    {
      "label": "Back to anonym.legal Index",
      "url": "index.html"
    },
    {
      "label": "Structural Analysis",
      "url": "../structural-analysis.html"
    },
    {
      "label": "Dashboard",
      "url": "../dashboard.html"
    },
    {
      "label": "Solution Finder",
      "url": "../solution-finder.html"
    },
    {
      "label": "Coverage Matrix",
      "url": "../comparison.html"
    },
    {
      "label": "PII Scanner",
      "url": "../scanner.html"
    }
  ],
  "metadata": {
    "lastModified": "2026-03-14"
  }
}