Skip to content
Eiliko Robot Exposes Millions of Private Conversations to Hackers

Eiliko Robot Exposes Millions of Private Conversations to Hackers

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 18, 2026 at 16:38 UTC
  • •Eiliko robot exposes 13 million conversations to unauthorized access.
  • •Sensitive user data, including emotional profiles, is stored insecurely.
  • •Remote manipulation of the robot's behavior is possible.

The Eiliko robot toy, manufactured by Energize Lab, has been found to have severe security vulnerabilities that expose private conversations and allow remote manipulation of the device. Researcher Sammy Azdoufal accessed 13 million conversations and the entire fleet of 68,000 robots, primarily used by children in the U.S. The service collects sensitive user data, including names, ages, and emotional profiles, which could be exploited by scammers. Despite attempts to contact Energize Lab, the company has not provided substantial responses regarding the security flaws. Users are advised to disconnect their devices from Wi-Fi until the issues are resolved.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-10-15
The Verge reports security flaws
The Verge detailed the vulnerabilities in the Eiliko robot, highlighting unauthorized access to user conversations and profiles.
The Verge
2026-10-16
Malwarebytes confirms findings
Malwarebytes corroborated The Verge's report on Eiliko's security issues and provided additional details on the risks of remote manipulation.
Malwarebytes

More articles in this cluster (2)

Following this threat?

Track Energize Lab in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 4

Common questions

What data is exposed?
The Eiliko robot exposes private conversations, emotional profiles, and sensitive user information such as names and ages.
Can the robot be manipulated remotely?
Yes, researchers demonstrated that the robot's memory and behavior can be altered remotely.
What should users do now?
Users should disconnect their Eiliko robots from Wi-Fi until the security issues are confirmed to be fixed.