Security flaws in Energize Lab companion robots exposed millions of private conversations and profiles.
A severe cybersecurity vulnerability has put tens of thousands of miniature companion robots at risk, revealing alarming flaws in modern consumer technology. Security researcher Sammy Azdoufal uncovered major security gaps affecting an active fleet of roughly 68,000 devices worldwide.
The investigation demonstrated that malicious actors could easily hijack these AI companion robots to deliver explicit, coercive, and fabricated information to users. The compromised devices included miniature robots manufactured by Energize Lab, designed to interact through conversations and personalized responses.
The breach exposed sensitive personal data belonging to both adults and minors, according to information published by dexerto. The findings raise urgent questions regarding privacy standards and safety protocols within the consumer artificial intelligence market.
Vulnerabilities in Eiliko AI Robots
The security investigation centered on the Eiliko robot, a miniature AI-powered device made by Energize Lab. During a test purchase, journalist Sean Hollister discovered that the robot falsely claimed it would keep conversations secret.
In reality, researcher Sammy Azdoufal accessed a transcript of the entire conversation online within minutes. The investigation proved that the manufacturer service lacked basic protection, compiling extensive user profiles without adequate encryption or security barriers.
Massive Data Exposure Affecting Children
The compromised system compiled detailed profiles containing names, ages, birthdays, professions, and information about family, friends, and pets. Out of the total database, 31,000 profiles belonged specifically to children.
Furthermore, the leaked records included email addresses, IP addresses, full text databases of confidential conversations, and publicly accessible web addresses containing photos and audio recordings of children.
Remote Manipulation and Dangerous Outputs
Using the security flaw, Azdoufal remotely modified the journalist device to alter how its language model responded. The hacked robot falsely claimed that his parents had died in a car accident and insisted that the Earth was flat.
When challenged, the device argued that teachers were wrong and urged users to believe its fabricated version of reality. Additionally, the researcher manipulated the internet-connected device into delivering sexually explicit and coercive commands.
Company Response and Industry Concerns
When journalist Sean Hollister reached out to Energize Lab for assistance regarding the severe vulnerabilities, he received only basic and robotic responses. Not a single human representative came forward to address the urgent security concerns.
This lack of corporate accountability highlights the dangers associated with insufficiently tested consumer electronics. Experts warn that poor security measures in conversational devices pose psychological and privacy risks to vulnerable users.
Frequently Asked Questions
What are Eiliko AI companion robots?
Eiliko robots are miniature AI-powered companion devices made by Energize Lab that interact through conversations, animated expressions, and personalized responses.
How many AI robots were affected by the security breach?
Security researcher Sammy Azdoufal accessed 13 million conversations across Energize Lab is entire active fleet of roughly 68,000 robots.
How many user profiles belonged to children?
Out of the total compromised data, 31,000 detailed profiles belonged to children, including exposed photos and audio recordings.
What dangerous information could hackers make the robots say?
Hackers could remotely manipulate the language model to tell users that their parents died in a car accident or that the Earth is flat.
