Skip to main content

Connected CloudPets teddy bears blab on owners, leak 2 million voice recordings

Amazon, Walmart, and Target are no longer selling CloudPets

Cloud Pets As Seen On TV Commercial

Remember when the worst thing that could happen to your doll was it losing an eye? How times have changed.

In the latest toy scandal (yes, those are a thing now), a connected teddy bear leaked the voice recordings of more than 2 million children and parents, along with email addresses and password information associated with more than 800,000 accounts. As first reported by Troy Hunt in a blog post published in late February, Spiral Toys, the company behind the CloudPets line of stuffed animals, left a whole lot of user data vulnerable to attack. Now, those toys have been pulled from a number of retailers, including Amazon, Walmart, and Target.

Amazon began taking down CloudPets from its online marketplace after being contacted by Mozilla, which offered research that highlighted the potential dangers of the child’s toy.

“In a world where data leaks are becoming more routine and products like CloudPets still sit on store shelves, I’m increasingly worried about my kids’ privacy and security,” Ashley Boyd, Mozilla’s vice president of advocacy, said in a statement.

When it comes to CloudPets, it looks like that concern is well-placed. A few months ago, Hunt explained the vulnerability, writing in his blog post, “…in CloudPets’ case…data was stored in a MongoDB that was in a publicly facing network segment without any authentication required and had been indexed by Shodan (a popular search engine for finding connected things).” So what does that mean? In essence, customer data could be easily accessed by just about anyone, and accessed it was. Hunt noted that as per data from Shodan, between December 25 and January 8, customer data was looked into many times by many people, including by malicious parties who demanded ransom for the release of some of this data.

Worse still, it would appear that CloudPets was actually warned of this problem, with Hunt noting that a good samaritan had “tried to contact CloudPets three times to warn them about the exposure.” Unfortunately, the email address listed on the company’s support page bounced back, and subsequent attempts at contact went unanswered.

Sadly, Hunt said, this kind of willful ignorance seems to be rather commonplace, particularly in the realm of cybersecurity. “Time and time again, there are extensive delays or no response at all from the very people that should be the most interested in incidents like this,” he wrote. “If you run any sort of online service whatsoever, think about what’s involved in ensuring someone can report this sort of thing to you because this whole story could have had a very different outcome otherwise.”

Updated on June 5: Amazon, Walmart, and Target pulled CloudPets from stores. 

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
Get this Roomba robot vacuum for $160 instead of the usual $275
iRobot Roomba 694 Robot Vacuum cleaning a foyer.

Crutchfield is currently selling an iRobot Roomba 694 robot vacuum for a fantastic discount. Usually costing $275, it’s down to just $160 for a very limited time only. One of the best robot vacuum deals around, the sale is only on until March 16 so you haven’t got long to snap one up. If you’re keen to streamline the cleaning process at home, check it out now before the sale ends.

Why you should buy the iRobot Roomba 694 robot vacuum
The Roomba range provides some of the best robot vacuums around meaning it’s the perfect brand to consider. With the iRobot Roomba 694, you get a 3-stage cleaning system with an edge-sweeping brush, dual roller brushes, and powerful suction. Alongside that, there are Dirt Detect sensors that inform it when it needs to give more attention to dirtier parts of your home.

Read more
The Blink Mini 2 features an updated design, support for outdoor use
The Blink Mini 2 placed on two books.

The original Blink Mini was one of the best indoor cameras thanks to its affordable price, 1080p resolution, and support for Alexa. Now, Amazon is making the gadget even more enticing with the new Blink Mini 2, which boasts a sleek new design and is capable of working both indoors and outside in the elements.

While it's still small and compact, the Blink Mini 2 looks slightly different from the old Blink Mini. Its corners are much softer, its entire chassis is white (instead of a white chassis and black faceplate), and its camera takes up a bit more space on the front of the device. The differences are apparent when the two gadgets are placed side by side -- and the minor changes add up to make the Blink Mini 2 look a bit more premium than its older sibling.

Read more
This 4-camera Lorex wireless video surveillence system is $200 off
A Lorex 2K Wireless camera mounted on an outside wall.

One of the best security camera deals today is over at Crutchfield with $200 off the Lorex 2K Wireless NVR System. Usually priced at $550, it’s down to a fantastic $350 until March 17. That means you don’t have very long to enjoy the significant discount. If you need to know more, we’re here to help with some insight about the security system below. Remember to buy it before March 17 if it sounds like the right setup for you.

Why you should buy the Lorex 2K Wireless NVR System
Sure to be one of the best home security camera systems for many people, the Lorex 2K Wireless NVR System is packed with features. It comes with an easy-to-use network video recorder along with four weather-resistant 2K cameras which are battery-powered and wireless. Any time the cameras notice motion, you’ll get a notification to your smartphone. You can then opt to view the live feed as well as talk to anyone on the other side. Its motion-based detection system does a great job of highlighting things only when there are people rather than objects, cutting down on false alarms.

Read more