A smart teddy bear from Fisher Price allowed attackers to steal the name, birthdate and gender of the child that owns the toy. This was possible due to a vulnerability in an accompanying app. The 'Smart Toy Teddy Bear' is able to recognize and memorize the voice of the child and respond to what it says.
ADVERTISEMENT
According to the discover of the leak, the American cybersecurity company Rapid7, the developers of the toy made an amateuristic mistake. According to Fisher Price the vulnerability hasn't been actively exploited and the company has no reason to presume that information about children has been stolen by unauthorized persons.
The company has also patched the vulnerability.
