Smart plush toys leaked data from 800,000 families

The stuffed animals of the Cloud Pets brand are linked to a mobile application that allows parent-child communication. Through this utility parents can record their voice and make the plush play it.

To access the application it is necessary a registration by providing personal information such as name, surnames, email addresses, telephone number or child's name.

Security specialist Troy Hunt has revealed that the parents' credentials were stored in a MongoDB database with little security. This database contained more than 800,000 accounts, many of them with weak passwords and easy to hack, thus exposing the conversations recorded by teddies.

botón arriba