AI Toy Security Flaw Exposed Over 50,000 Kids' Chat Logs to Anyone With a Gmail Account
Security researchers discovered that Bondu, an AI-powered stuffed toy company, left more than 50,000 children's chat transcripts completely unprotected on its web portal. Anyone with a Gmail account could access kids' names, birthdates, family details, and intimate conversations. The company fixed the issue within hours, but the incident raises serious questions about privacy risks with AI toys and the sensitive personal information they collect from children.