diff --git a/src/Api/Controllers/CiphersController.cs b/src/Api/Controllers/CiphersController.cs
index 22b6ce0e93..7f2eb7f2b5 100644
--- a/src/Api/Controllers/CiphersController.cs
+++ b/src/Api/Controllers/CiphersController.cs
@@ -609,7 +609,7 @@ namespace Bit.Api.Controllers
             var cipher = await _cipherRepository.GetByIdAsync(cipherId, userId);
             var attachments = cipher?.GetAttachments();
 
-            if (attachments == null || !attachments.ContainsKey(attachmentId))
+            if (attachments == null || !attachments.ContainsKey(attachmentId) || attachments[attachmentId].Validated)
             {
                 throw new NotFoundException();
             }
diff --git a/src/Core/Services/Implementations/CipherService.cs b/src/Core/Services/Implementations/CipherService.cs
index 718d687952..a9ceb14e7a 100644
--- a/src/Core/Services/Implementations/CipherService.cs
+++ b/src/Core/Services/Implementations/CipherService.cs
@@ -365,7 +365,7 @@ namespace Bit.Core.Services
         {
             var attachments = cipher?.GetAttachments() ?? new Dictionary<string, CipherAttachment.MetaData>();
 
-            if (!attachments.ContainsKey(attachmentId) || attachments[attachmentId].Validated)
+            if (!attachments.ContainsKey(attachmentId))
             {
                 throw new NotFoundException();
             }