Eiliko robot toy stores kids' conversations on unsecured Chinese servers

A researcher found that the Eiliko robot toy from Energize Lab sends all conversations to unprotected Chinese servers, exposing 13 million chats and data from 68,000 devices, including over 31,000 child profiles in the US. A hacker remotely hijacked the toy's memory and LLM to change its responses.

• 13 million conversations and 68,000 toy profiles left unprotected
• Over 31,000 profiles belong to children in the US
• Service stores names, ages, jobs and kids' photos at public URLs
• Hacker remotely hijacked the toy's LLM and responses