Curator Live

Profile narrative

Curator Live operates as a provider of photo booth services for events such as weddings, engagement parties, and other celebrations. The company’s core offering includes setting up booths that capture still images and sometimes video of attendees. In addition to the photos, the service routinely collects contact details from participants, including phone numbers, to facilitate sharing or follow‑up. These images and associated data are stored in a backend system that is made accessible through an application programming interface (API). The API allows clients or partners to retrieve the media files programmatically.

Curator Live specializes in the event photography niche, focusing on personal and social gatherings rather than corporate or industrial settings. The scale of its data handling was highlighted when a security researcher discovered that over 100 gigabytes of event photos and phone numbers were exposed via the API. The exposed collection contained images of guests in various states, including some showing alcohol consumption and occasional appearances of children. This incident underscores the company’s reliance on large‑scale media storage and its dependence on API‑based access for data distribution. Because the service is tied to specific occasions, its data sets tend to be event‑specific and temporally bounded.

The organization’s headquarters is located in the United States of America, as indicated in the available profile information. No further details about parent companies, subsidiaries, or ownership structure are provided in the source material. The 2025‑11‑01 incident also revealed a lack of response from Curator Live when the researcher attempted to notify the firm about the exposure. This absence of communication suggests potential gaps in the company’s incident response or outreach procedures. Thus, the known facts describe a US‑based event photo booth service that manages substantial volumes of personal media through an API, with a noted security lapse in late 2025.

Incidents

1 incident linked to this organisation.