Your Secrets Aren’t Safe With This Cute Robot Toy — They’re on Chinese Servers Ready to Be Hacked
Eiliko and its manufacturer, Energize Lab, are seemingly not to be trusted.
By Sean Hollister
In 2026, smart toys remain a popular gift for children and adults alike, but the Eiliko robot toy is raising serious privacy and security concerns. According to security researchers, the device transmits sensitive user data to servers located in China, where it is stored without adequate encryption and is vulnerable to hacking.
The Eiliko, produced by Energize Lab, is marketed as a friendly companion that can listen, respond, and learn. However, its inner workings tell a different story. Investigations reveal that voice recordings, personal conversations, and even account credentials are sent to remote servers in China. These servers lack basic security measures, making the data an easy target for cybercriminals.
This isn't an isolated incident. As IoT devices proliferate, many manufacturers prioritize cost over security, often outsourcing data storage to regions with lax privacy laws. The Eiliko case underscores a growing trend: even innocuous-looking gadgets can become vectors for data breaches.
For consumers, the advice is clear: think twice before inviting a connected toy into your home. Until Energize Lab addresses these vulnerabilities and transparently discloses its data practices, the Eiliko remains a risk not worth taking.
via The Verge AI