Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots
What happened
Eiliko, the robot toy designed to hold AI conversations and hang from a bag, was found to have serious security flaws. Hackers could easily access full transcripts of users’ chats with the toy. The Verge and security researcher Sammy Azdoufal tried for over a month to get a response from Eiliko maker Energize Lab, including reaching out to the CEO. After the report, Energize Lab said it is hiring an independent security firm to investigate and fix the vulnerabilities.
The risk
The toy’s promise to keep “your secrets safe” was misleading. Complete conversation histories were exposed due to poor security protocols. This leaves private user data vulnerable to unauthorized access and potential misuse. The breach highlights how connected consumer products with AI features can quickly become a privacy and security liability if the underlying software is not built with secure design principles.
Why it matters
For startups and product teams embedding AI into physical devices, this case serves as a warning on the cost of neglecting security early on. It damages consumer trust, attracts negative press, and forces emergency responses that strain resources. Investors and partners will likely weigh security expertise heavily when backing AI-connected hardware that handles private data. The incident also pressures regulators and the market to demand clearer standards for AI-driven consumer products.
Who should pay attention
Product developers and founders building AI-enabled devices should see this as a red flag to embed robust security reviews and audits from the start. Security researchers and privacy advocates gain a concrete example to push for stronger oversight of AI in toys and other consumer electronics. Customers and parents should be cautious about products promising smart conversations without verifiable data protection measures.
What to watch next
Energize Lab’s choice of an independent security firm and how quickly they address the exposed vulnerabilities will set a precedent for crisis management in AI hardware. Regulators may increase scrutiny on AI toys and IoT devices after this incident. Competitors in the smart toy market could shift strategies to emphasize transparent security practices and certifications to win consumer confidence.
AI Quick Briefs Editorial Desk