Updated: The CloudPets Incident is Everything That’s Wrong with Consumer Internet of Things
ID: 5705ead9-1674-5a5f-9729-5e4a2d70db15
STIX ID: report--5705ead9-1674-5a5f-9729-5e4a2d70db15
Feed Name: Security Ledger
Threat Score
Security researchers found that Spiral Toys' CloudPets left an unsecured MongoDB instance and improperly protected AWS-hosted files publicly accessible, exposing ~583,000 customer records (including voice recordings and images); the data was indexed by Shodan and subsequently ransomed and deleted by attackers, illustrating systemic security failures and weak password controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.