IoT Teddy Bear Leaks Voice Messages and Passwords
Connected toys are causing trouble again as more than 2 million voice recording of children and parents have been exposed, as well as email addresses and passwords for over 820,000 accounts.
The line of IoT stuffed animals called CloudPets allows children and relatives to send recorded voicemails back and forth between animals.
From December 25, 2016 through January 8, 2017, these voicemails were available in a database with no password or firewall. The exposed data was accessed multiple times by multiple parties, including hackers that stole emails and passwords.
Spiral Toys was reportedly made aware of the breach multiple times and did nothing.
Return To Article
