Security researchers who accessed the unsecured console found intimate details of children's lives—their fears, family situations, and daily routines—all logged and stored without adequate protection.

The stuffed animals, marketed as friendly AI companions for children, record and process conversations to provide interactive responses. But the company apparently failed to implement basic security measures on the backend systems storing this sensitive data.

The exposure raises serious questions about the rush to bring AI products to market, particularly those targeting vulnerable populations like children. Privacy advocates have long warned about the risks of AI toys that listen and record.