Amazon withdraws connected toys after researchers find security flaws
In June 2018, after privacy activists found security flaws in toys such as My Friend Cayla and others and the US Consumer Product Safety Commission opened an investigation into the problems of connected gadgets, Amazon, Walmart, and Target announced they would stop selling CloudPets. Made by Spiral Toys, CloudPets uses voice recordings, an internet connection, and a Bluetooth-connected app. In 2017, a hackers were able to access and hold for ransom CloudPets' database, including email addresses, passwords, and children's voice recordings. The attack affected more than 800,000 people. More than a year later, Mozilla, working with cybersecurity research company Cure53, found the Bluetooth vulnerabilities were still open.
Writer: Alfred Ng
Publication: CNet