US Spiral Toys Jan 2017 Hacking (Q15347)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Spiral Toys Jan 2017 Hacking |
A data breach risk event |
Statements
591bab60-0aa4-11e8-827c-bba53cbad290
January 2017
0 references
Spiral Toys is a company that creates toys for children. It has an internet-connected product called CloudPets which allows parents and children to record and send voice messages to each other through a mobile app. On January 7, hackers discovered that the database the company was using to store data for this product was unsecured. Hackers took control of the database, deleted all information, and demanded a payment to restore the data. The database contained information for 820,000+ users containing emails, bcrypt hashed passwords, and links to voice recordings customers and their children had made which could now be publicly accessed. Additional information stored included pictures, names, birthdays, and relationships. Customers were not notified that their data had been compromised. (English)
