Eiliko robot toy maker Energize Lab responds after security flaws exposed

The Eiliko charm, designed to hang on bags and engage in AI conversations, was marketed with the claim 'your secrets are safe with me.' But security researcher Sammy Azdoufal, working with The Verge, discovered that hackers could read complete transcripts of conversations without difficulty. The Verge and Azdoufal spent over a month attempting to contact Energize Lab, including emails to CEO Shaw Yeung, but received no response.

Now, after the story was published, the company has responded. It said it has confirmed the core issues and, according to The Verge, plans to hire an independent security firm. However, The Verge criticized the company's response as leaving 'something to be desired.' The full investigation is available at The Verge.

Analysis

Why This Matters

The flaw exposed private data of potentially many users, undermining trust in AI toys.
The company's initial failure to respond raises questions about responsible disclosure and corporate accountability.
The case could prompt tighter regulation of security in connected consumer products.

Background

Eiliko is a toy robot charm that uses AI to converse with its owner. The Verge's investigation, conducted with security researcher Sammy Azdoufal, found that the device stored conversation transcripts insecurely, allowing remote access by attackers.

Key Perspectives

The Verge and Security Researcher: Their investigation uncovered severe security gaps and encountered a lack of communication from the company. Energize Lab (Eiliko maker): After the report, it acknowledged the issues and said it would hire an independent security firm, but critics (including The Verge) note the response was delayed and incomplete.

What to Watch

The findings of the independent security firm hired by Energize Lab.
Any further vulnerabilities discovered.
Potential consumer lawsuits or regulatory action.

Checked

11 claims in this story checked against 1 source: 7 supported.

Show each claim

SupportedEnergize Lab responded after The Verge reported security problems with its Eiliko robots.The Verge: “Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots.”
SupportedThe company will hire an independent security firm.The Verge: “Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots.”
Partly supportedCritics called the company’s response insufficient.The Verge: “Now, the company is finally breaking its silence, though its response leaves something to be desired.”
Partly supportedThe Eiliko is a plush, AI-powered toy.The Verge: “Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations”
SupportedHackers could easily read complete transcripts of conversations with the toy.The Verge: “hackers could easily read complete transcripts of everything we told the toy”
SupportedThe company confirmed the core issues.The Verge: “We have confirmed the core issues ide”
SupportedThe Verge and Sammy Azdoufal spent over a month trying to contact Energize Lab, including by emailing CEO Shaw Yeung, and got no response.The Verge: “The Verge and security researcher Sammy Azdoufal spent over a month trying to get in contact with the company, including emails to Energize Lab CEO and founder Shaw Yeung. Nobody would answer our questions.”
Not in the sourcesSammy Azdoufal, working with The Verge, discovered that hackers could read the transcripts.The Verge
Partly supportedThe toy’s claim was “your secrets are safe with me.”The Verge: “It told owners that "your secrets are safe with me,"”
SupportedThe Verge said the company’s response left “something to be desired.”The Verge: “Now, the company is finally breaking its silence, though its response leaves something to be desired.”
SupportedThe company responded after The Verge’s story was published.The Verge: “Now, the company is finally breaking its silence”