AI toy chats accessible to anyone with Gmail account

Earlier this month, Joseph Thacker investigated a stuffed dinosaur toy called Bondu, which features an AI chat function for children. His research revealed a significant security flaw: by simply logging in with a Gmail account, he and a colleague could access transcripts of private conversations between the toys and their child users. This included sensitive information like children’s personal preferences and pet names for the toys. The incident raises serious concerns about privacy and data security for products aimed at children.

Want More Context? 🔎