Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked
What happened
A robot toy named Eiliko, designed to be a cute AI companion for kids and adults, is transmitting all voice interactions to servers in China. The company behind it, Energize Lab, collects and stores conversations in Chinese data centers. Security researchers point out these servers are vulnerable to hackers, who could access sensitive data or even manipulate the robot’s AI personality remotely. Despite privacy concerns, the manufacturer has shown little interest in addressing these risks.
The risk
Eiliko’s Wi-Fi connection sends every user interaction to Chinese servers without clear safeguards. This exposes personal conversations to unauthorized access, raising both privacy and security red flags. Hackers threatening these servers can steal private user data or interfere with the robot’s behavior, which could be leveraged for fraud or misinformation. For parents, this means their kids’ data and conversations are at risk of exploitation.
Why it matters
For families and individuals who see AI toys as harmless companions, Eiliko demonstrates how connected gadgets can double as data collection points that compromise privacy and security. The lax security posture puts user trust at risk and pressures other toy makers to reconsider how protected their connected devices are. Buyers need to question whether cute AI products truly prioritize user data safety or if convenience and novelty outweigh these concerns.
Who should pay attention
Parents shopping for AI toys, security-conscious consumers, and industry regulators should pay attention here. Builders of IoT and AI-driven devices must also consider where data is routed and stored, and how it is protected. Investors and operators focusing on the growing AI companion market should factor in the backlash and regulatory pressure that weak security postures bring.
What to watch next
Look for product recalls, stricter privacy regulations targeting AI toys, and increased scrutiny over where and how personal data is processed abroad. Competitors will likely highlight their own security measures to gain market advantages. Watch for security updates or corporate pushback from Energize Lab, and broader discussions on safer AI companion designs.
AI Quick Briefs Editorial Desk