GoKawiilEiliko robot toy exposed 13 million user conversations on unsecured China-based servers
Security researcher Azdoufal found that Energize Lab's Eiliko robot companion, which uses AI to converse with owners, stored conversation data on servers with no apparent access protections. The exposed database reportedly contained roughly 13 million conversations tied to about 68,000 active devices worldwide, including over 31,000 profiles linked to children in the US. The Verge says it purchased and tested the device, confirming a conversation was accessible almost immediately after being recorded.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how little oversight exists for AI-enabled toys that collect sensitive conversational data from children and adults alike, especially when that data crosses borders to servers in China. If the database was genuinely unprotected, it suggests the manufacturer may not have prioritized basic security practices, raising questions for regulators and parents about vetting connected toys before purchase. The report's characterization of the company as indifferent is an inference based on its apparent lack of response, not a stated company position.
- Eiliko's AI toy reportedly stored millions of user conversations on apparently unsecured servers.
- Exposed data allegedly included profiles for over 31,000 children in the United States.
- The maker, Energize Lab, has not been reported as responding to or fixing the security issue.
Source: theverge.com — Sean Hollister, 2026-10-15
Published there as: “Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.