AI Toy Eiliko: Secrets Exposed by Hackers

The Eiliko AI robot, marketed as a charming companion for bags, has been revealed as a security vulnerability. Despite claims that user secrets were safe, hackers could access full transcripts of conversations. This breach was discovered by security researchers who spent over a month attempting to contact the company, Energize Lab, without initial success.

Energize Lab has now responded, confirming core issues and promising an independent security review. They stated that external access to backend systems has been closed and remote modification of robot responses disabled. The company also pledged to delete all stored conversation records, user profiles, and avatar images.

However, security concerns persist as customer audio recordings and photos were found at unsecured public web addresses. Furthermore, a security researcher reported maintaining SSH access, allowing potential transcript reading and behavior modification, contradicting Energize Lab's claims of closed access. The company aims to regain trust through future actions.