Your Child’s Robot Toy Is Broadcasting Private Conversations to China

The security vulnerability extends far beyond a single toy. An investigation into the Eiliko robot, purchased via Amazon, uncovered a massive database containing 13 million conversations from tens of thousands of users. This exposed fleet includes 31,000 profiles belonging to children, primarily located in the United States. The breach allows virtually anyone to hijack the robot’s personality or access private audio logs stored on insecure Chinese servers.

This discovery follows a string of security failures identified by researcher Sammy Azdoufal, who has previously exposed vulnerabilities in DJI vacuums and Meari baby monitors. Despite the clear risks to user privacy, Energize Lab has yet to address the lack of encryption or the accessibility of its global server network. For parents and users, the device functions less like a companion and more like an open microphone broadcasting intimate details directly to the public web.