Eiliko Robot Toy Exposed in Major Data Breach Vulnerability
Understand the story
On October 15, 2026, a Verge reporter and hacker Sammy Azdoufal conducted a hands-on test of Energize Lab's Eiliko companion robot toy. The results showed the toy's service had no safeguards at all: full transcripts of conversations from about 68,000 devices were stored in a searchable database on Chinese-language servers with no encryption. The system also automatically generated user profiles covering users' names, ages, occupations, family members and mental states. Additionally, testing found that the large language model (LLM) connected to the device could be remotely hijacked. These findings indicate Eiliko has major security flaws in data storage and access control, putting sensitive information of children and families at risk of exposure. The report so far discloses only these test findings; there is no follow-up news of an official response or remediation from Energize Lab, and the situation is still developing.
AI overview of reporting · Updated 3 days ago
Reporting timeline
Explore different aspects of the story through its reporting.
- The Verge · AIYour secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked
A Verge reporter and hacker Sammy Azdoufal tested Energize Lab’s Eiliko companion robot toy and found its service has no protections at all: full conversation transcripts are stored in a searchable database on Chinese servers, and user profiles are automatically generated covering names, ages, occupations, family members, and psychological states.
Story heat trend
Current heat3·Comparable peak10（10/15 20:00）·Comparable change over 24 hours -49%
The trend compares the same continuously observed sources, which may cover fewer sources than the current heat score. Hover or select the chart to inspect each hour; use the left and right arrow keys to navigate.