Creepy IoT teddy bear leaks data

A maker of Internet-connected stuffed animal toys has leaked a database of sensitive customer data. The leak includes more than 2 million voice recordings of children and parents, as well as e-mail addresses and password data for more than 800,000 accounts

...since December 25 and January 8, the customer data was accessed multiple times by multiple parties, including criminals who ultimately held the data for ransom.

https://arstechnica.com/security/2017/02/creepy-iot-teddy-bear-leaks-2-million-parents-and-kids-voice-messages/

When seeing the topic title listed on the main forum area it read as "Creep loT teddy bear leaks...". :lol: I know it's due to the larger font size I use in the browser, but it was funny until I saw the final word "data".

- So, it's not the bear itself that has leaked that info/data but the computer database that was connected to the IoT bear that was "poorly" secured.

- IoT fridges, IoT toy bears, ............... . More good reasons to stay away/avoid IoT connected devices. Or - at least - turn off the IoT functionality. Is it possible to switch off those IoT features ?

I wish they would put the serifs back on capital I. It looks like a small L.

I hope my connected toilet isn't leaking stuff. :wacko:

(Awww come on, the topic was asking for that)

My BlueToothbrush got a virus.

(back to you, Dennis)

They may screw up my PC, but no way am I leaving my phone, TV, thermostat, washing machine, refrigerator, heat, A/C, lights, electricity, water supply open to possible attack from someone in else in the world who thinks it must not be so. And don't think there aren't such people.

Just to scare yourself go here and enter Canon printer or HP printer in search bar at very top of the page (you could put any internet connect appliance, that was just an example)

https://www.shodan.io/

phew, plugged in Talkie Toaster, no results found.... excellent.

Hazelnut, I tried that with HP printers and I saw 10 other country/state locations that had HP printers but of different types than mine. Are you saying these 10 are connected to my printer somehow?

It's not your computer from what I gather when I looked at it, it's just other people who have theirs wide open to any form of attack via insecure Wi-Fi.

That's why I manually input devices via their MAC address to allow Wi-Fi usage in my household. By doing that nothing without my manual approval and permission can use the network. Doing it that way is way more secure however it can be annoying when adding a new device, so sometimes I have to decrease my security measures just so I can get the MAC address of a particular new device via my modem logs, then once I have the MAC address I can then go back into locking everything down again.

So these people are losers.

well, innocents knowing no better let's say. :)

just wouldn't be in their skill set or care factor.

And they may not even know their devices are so vulnerable - certainly no manufacturer of such devices is claiming such on the boxes or in the user manual.

If they had to show disclaimers like medical prescription ads on TV I think they'd lose customers pretty fast.