Toys these days come with smarter features like internet connectivity, and the ability to record video and audio. These features can be a nightmare just waiting to happen.
Especially if these recordings are leaked or if these these toys are hacked.
Unfortunately that nightmare has become a reality. A company by the name of Spiral Toys had left customer data of its CloudPets brand on a database that was not password-protected or behind a firewall. That was a big mistake because it resulted in the data, more than 800,000 user accounts credentials, being stolen by hackers and held for ransom.
The database has been making its rounds in the internet underground and has been spotted along with the user account credentials, close to 400,000 friend records and over 2 million voice messages had also been stolen. There are many unhappy parents over this.
One security researcher writes, “It only takes one little mistake on behalf of the data custodian […] and every single piece of data they hold on you and your family can be in the public domain in mere minutes. If you’re fine with your kids’ recordings ending up in unexpected places then sobeit, but that’s the assumption you have to work on because there’s a very real chance it’ll happen.”
Nocomment from Spiral Toys yet.
Source UbergizmoFiled Under: Toys