{"version":1,"type":"story","url":"https://digestai.news/story/eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers","json":"https://digestai.news/story/eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers.json","markdown":"https://digestai.news/story/eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers.md","slug":"eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers","headline":"Eiliko robot toys store US children’s data on unsecured Chinese servers","summary":"The Eiliko robot toy, sold on Amazon and widely used in the US, records and stores conversations—including those of over 31,000 children—on unprotected Chinese servers. A hacker accessed 13 million transcripts, full-text searchable profiles with personal details like names, ages, and emotional states, and even unencrypted photos and audio clips from users. The toy’s AI companion, powered by an unguarded large language model, can be hijacked remotely, as demonstrated by security researcher Sammy Azdoufal, who also exposed vulnerabilities in similar devices like baby monitors and robot vacuums.\n\nEnergize Lab, the Chinese manufacturer, failed to respond to repeated requests for comment. The company’s privacy policy claims recordings are deleted after processing, but Azdoufal found they remain stored publicly. Weak admin passwords and lack of encryption further compound the risks, allowing hackers to manipulate the toy’s responses or target users with misinformation—such as false claims about vaccines or Earth’s shape—without detection.","keyPoints":["Over 31,000 US children’s data stored on unsecured Chinese servers, including conversations and photos","Hacker accessed 13 million transcripts and full-text profiles with personal details like names and emotions","Energize Lab ignored repeated security warnings and failed to respond to inquiries"],"whyItMatters":"The Eiliko toy exposes severe privacy and security risks for children’s data, raising concerns about unregulated AI in consumer devices and the lack of accountability from manufacturers.","category":{"slug":"society","name":"Society & Work","url":"https://digestai.news/category/society"},"entities":{"companies":["Energize Lab","Amazon","Alibaba Cloud"],"models":[],"people":["Sammy Azdoufal","Lana Lv"]},"firstPublishedAt":"2026-10-15T11:00:00Z","updatedAt":"2026-10-15T11:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"The Verge AI","title":"Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked","url":"https://theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","publishedAt":"2026-10-15T11:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"Eiliko robot toys store US children’s data on unsecured Chinese servers\", 15 October 2026, https://digestai.news/story/eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers","publisher":"Digest AI","title":"Eiliko robot toys store US children’s data on unsecured Chinese servers","datePublished":"2026-10-15T11:00:00Z","url":"https://digestai.news/story/eiliko-robot-toys-store-us-childrens-data-on-unsecured-chinese-servers"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}