Energize Lab responds after Eiliko robots expose customer data
Original title: Eiliko maker says it’s hiring an ‘’independent security firm’ after Verge report on its insecure robots
The Verge says photos, audio, and SSH access remained reachable after the company claimed external access was closed.
Energize Lab confirmed security issues The Verge reported in its Eiliko AI robot charm and said it will hire an independent security firm. Its unsigned statement says the company closed external backend access, rotated credentials, disabled remote changes to robot responses, and stopped storing conversation records and generated user profiles. It also pledged to delete stored conversations, profiles, and avatar images. Checks with researcher Sammy Azdoufal still found customer audio and photos at public addresses and working SSH access.
Unconfirmed: Energize Lab says all external access is closed, but the reporter’s checks contradict that claim.
- Energize Lab created security@energizelab.com and apologized for not answering questions for over a month.
- Long-term memory and custom avatars are offline until a security review says they are safe.
- The company says it will delete stored conversation records, user profiles, and avatar images.
- Azdoufal still reported SSH access that could read transcripts and change robot behavior.
Impact: Customer transcripts, photos, audio, and robot control were exposed
| Product | Affected |
|---|---|
| Energize Lab Eiliko | — |
- Vendors
- Energize Lab
- Products
- Eiliko
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| security@energizelab.com | fully review all of its systems, and has set up a dedicated security@energizelab.com contact email. The company also claims that as of Wednesday |
From the original article
3 min read at theverge.com
The Eiliko robot toy. | Photo by Sean Hollister / The Verge Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that "your secrets are safe with me," but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning.
By Sean Hollister · theverge.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.