{"id":"01M6MYE6XAG39V4WJD6F7Q4B04","slug":"spiral-toys-cloudpets","vendor":"Spiral Toys","oem":null,"model":"CloudPets","hw_revision":null,"category":"toy","country_of_origin":"CN","description":"Plush toys that recorded voice messages to the cloud. In 2017 the backing database and 2 million recordings were found exposed on the internet; Bluetooth pairing was unauthenticated.","status":"confirmed","status_reason":"Public database exposure documented by Troy Hunt, Feb 2017","status_at":1793853873164,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851857834,"updated_at":1793853873164,"url":"https://isitspying.com/p/spiral-toys-cloudpets","badge":"https://isitspying.com/badge/spiral-toys-cloudpets.svg","identifiers":[{"kind":"bt_name","value":"CloudPets","product_id":"01M6MYE6XAG39V4WJD6F7Q4B04","confidence":1,"source":"seed","created_at":1793851857996},{"kind":"model_number","value":"CLOUDPETS","product_id":"01M6MYE6XAG39V4WJD6F7Q4B04","confidence":1,"source":"seed","created_at":1793851857948}],"findings":[{"kind":"always_on_mic","severity":"high","n":1,"verified_n":1},{"kind":"exfiltrates_user_data","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYE77CS2BG7Q13VKJ3TDEY","url":"https://isitspying.com/r/01M6MYE77CS2BG7Q13VKJ3TDEY","status":"verified","verdict":"malicious","summary":"Voice recordings and account data exposed via an unsecured MongoDB; unauthenticated BLE lets anyone nearby play audio and record","method":"app_analysis","channel":"api","handle":"isitspying","created_at":1793851858156}],"responses":[],"sources":[{"id":"01M6MYE74X3F2BEFBBJJDH83H4","product_id":"01M6MYE6XAG39V4WJD6F7Q4B04","report_id":null,"title":"Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages","url":"https://www.troyhunt.com/data-from-connected-cloudpets-teddy-bears-leaked-and-ransomed-exposing-kids-voice-messages/","publisher":"Troy Hunt","published_at":"2017-02-27","created_at":1793851858077}]}