GoKawiilEnergize Lab's Eiliko toy exposed 13 million private conversations, researcher finds
Security researcher Sammy Azdoufal gained access to the backend database behind Energize Lab's Eiliko robot companions, reportedly exposing 13 million conversations from the company's entire 68,000-device fleet, according to an investigation by The Verge. The exposed data included detailed user profiles with names, ages, birthdays, occupations and personality traits, plus email and IP addresses, and over 31,000 profiles belonging to children. Azdoufal also demonstrated he could remotely alter what a device said, including making it issue sexually explicit commands.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident suggests that AI companion devices marketed for emotional support can quietly compile psychologically revealing profiles of users, including vulnerable children, which if exposed could be exploited by scammers or bad actors seeking manipulation targets. It also raises broader questions, which The Verge's reporting implies but does not fully answer, about how connected toy makers secure sensitive conversational data and whether regulatory oversight of such devices is adequate.
- A researcher accessed 13 million conversations from Energize Lab's entire 68,000-unit Eiliko robot fleet.
- Exposed data included personal profiles with names, ages, occupations and personality traits, plus over 31,000 children's profiles.
- The researcher demonstrated he could remotely rewrite a device's responses, including explicit content.
Source: techspot.com — Skye Jacobs, 2026-10-17
Published there as: “Eiliko robot maker Energize Lab left its entire fleet of 68,000 robots open to a remote takeover”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.