{"id":9566,"date":"2017-04-06T09:00:45","date_gmt":"2017-04-06T14:00:45","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=9566"},"modified":"2017-04-07T14:33:17","modified_gmt":"2017-04-07T19:33:17","slug":"millions-kids-conversations-leaked-due-teddy-bears","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/millions-kids-conversations-leaked-due-teddy-bears\/","title":{"rendered":"Millions of Kids’ Conversations Leaked Due to Teddy Bears"},"content":{"rendered":"

Recently, CloudPets\u2019 database was hacked, and more than half a million people had their data leaked. CloudPets is a company that sells stuffed animals that are connected to the Internet of Things. Their stuffed animals can connect to an app via Bluetooth to allow parents to record audio messages or else play pre-recorded messages through the stuffed animal. While this could make a child\u2019s toy more fun and interactive, these messages unfortunately weren\u2019t securely stored in CloudPets\u2019 database, along with the rest of their customers\u2019 account information. If a major company\u2019s database can be breached, it\u2019s possible for hackers to access data on any of your devices, including your smartphone. DFNDR\u2019s Advanced Protection feature ensures that even if hackers gain access to your phone, virtually or physically, they will not be able to uninstall DFNDR and your data will remain safe. Click here to activate Advanced Protection:<\/span><\/p>\n

\"Deeplink_security\"<\/a><\/center>The CouldPets data leak included profile pictures, email addresses, passwords, and voice recordings. More than two million voice recordings of children and adults were released. Those who had their data leaked never received a notification of the leak. Cloudpets\u2019 user data was more vulnerable largely due to weak user passwords and poor database security. They allowed users to create passwords with one letter, such as \u201ca,\u201d for example. This allowed users\u2019 passwords to be easily guessed, which compromised their accounts.<\/span><\/p>\n

Read More: <\/b>How Parents Can Set Parental Controls on Their Kids\u2019 Phones<\/b><\/a><\/p>\n

How Was the Data Breach Revealed?<\/b><\/p>\n

Troy Hunt, who runs a breach notification website, revealed that the database was publicly accessible, meaning that it wasn\u2019t password-protected or hidden behind a firewall. According to Hunt, the data was traded online as early as last year, and often held for ransom. He had attempted to warn CloudPets of this data breach, without success. However, after CloudPets was notified of the breach \u2014 even though they did not publicly acknowledge the breach or inform users that their data was compromised \u2014 their original database was deleted. Shortly after, none of their databases were publicly accessible.<\/span><\/p>\n

Internet of Things Devices Often Have Weak Security<\/b><\/p>\n

This isn\u2019t the first time that IoT-connected toys were hacked. In 2015, for example, VTech experienced a large data breach that revealed personal information of more than five million adults and 200,000 kids. Shortly after, a Barbie doll by Mattel was found to be easily hackable. The doll could be used to record conversations in real-time. <\/span><\/p>\n

In addition to companies improving their database security, incidents like this could be prevented in the future if users follow safe online practices. This includes creating stronger passwords, using two-factor authentication when possible, and exercising caution when using IoT-connected devices. Many IoT devices, in general, are insecure; you should share as little data with them as possible, or neglect using IoT-connected toys all together until security is improved. Further, make sure that your router is a newer model that receives frequent security patches and updates.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

CloudPets, the creator of IoT-connected stuffed animals, recently had their database hacked, leaving millions of voice recordings exposed.<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[5],"tags":[942,252,306,195,309,860,4025,249],"class_list":["post-9566","post","type-post","status-publish","format-standard","hentry","category-security","tag-app0","tag-app1","tag-app4","tag-app5","tag-app7","tag-data","tag-dfndr","tag-security"],"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/9566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=9566"}],"version-history":[{"count":0,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/9566\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=9566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=9566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=9566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}