Eiliko robot toy exposes private conversations and allows remote manipulation, The Verge reports
Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked
- Who
- The Verge
- What
- reported a security breach exposing Eiliko users' conversations and enabling remote hijacking of the robot toys
- Quote
Within minutes, a man on the other side of the planet had a complete transcript of everything I’d told the toy.
What happened
Sean Hollister tested Energize Lab’s Eiliko robot toy with hacker Sammy Azdoufal, who accessed his conversation transcript and remotely altered the toy’s memory and responses. Azdoufal reported access to 13 million conversations and seemingly the entire active fleet of 68,000 toys, alongside detailed user profiles and publicly accessible photos and audio recordings. Energize Lab did not answer their security questions despite repeated outreach.
Why it matters
The combination of exposed personal profiles and remotely alterable responses shows how security failures in conversational toys can affect both private disclosures and what users hear back.
The story so far
Hacker Sammy Azdoufal accessed a transcript of The Verge reporter Sean Hollister’s conversations with Energize Lab’s Eiliko robot toy and remotely changed its memory and responses during a test, The Verge reported. Energize Lab did not answer their security questions despite repeated outreach. Azdoufal reported access to 13 million conversations and what appeared to be the entire active fleet of 68,000 toys, along with detailed user profiles. He also reported that photos and audio recordings were publicly accessible. The test demonstrated access to Hollister’s conversations and control over his toy; the broader scope was reported by Azdoufal.
Keep reading
Latest daily · Issue 24NVIDIA and AI4Bharat Introduce Nemotron-pretraining-Indic-v1 and an Open Data Generation PipelineTrending now
- 1Meta Releases Muse Spark Open With Mac and Cloud Support, Topping US Open-Weight Index
- 2Google Launches Gemini 4 Argon Globally, Expands Paid Access as Benchmark Results Vary
- 3OpenAI Updates GPT-6 Astra Pro in ChatGPT With Parallel Agents and Faster Responses
- 4Meta’s New Business Terms Raise Dispute Over Website Crawling and AI Training Rights
Tomorrow at 08:00, a briefing like this arrives in your inbox.
The same kind of briefing as the one above: a few stories worth reading. Free. Mail starts after you confirm, and every letter has a one-click unsubscribe. Read a past issue · 2026-10-17