POLICY · COMPANIES · #2036
Eiliko robot toy reportedly exposes user conversations on Chinese servers
A security researcher, Sammy Azdoufal, reported he could access an unprotected Energize Lab backend that appeared to contain transcripts and profiles from around 13 million conversations across about 68,000 Eiliko devices, many belonging to U.S. users. The data allegedly includes searchable full-text conversations, some audio and images (including of children), and unencrypted personal details despite a privacy policy saying recordings are deleted after processing (the company reportedly uses Alibaba Cloud).
KEY POINTS
- A security researcher, Sammy Azdoufal, reported he could access an unprotected Energize Lab backend that appeared to contain transcripts and profiles from around 13 million conversations across about 68,000 Eiliko devices, many belonging to U.S.
- The data allegedly includes searchable full-text conversations, some audio and images (including of children), and unencrypted personal details despite a privacy policy saying recordings are deleted after processing (the company reportedly uses Alibaba Cloud).
- If confirmed, the exposure would be a major privacy and child-safety risk—unencrypted transcripts, audio, images and profiling data can be abused for scams, stalking, or other harms.
WHY IT MATTERS
If confirmed, the exposure would be a major privacy and child-safety risk—unencrypted transcripts, audio, images and profiling data can be abused for scams, stalking, or other harms.