large image

Trusted Reviews is supported by its audience. If you purchase through links on our site, we may earn a commission. Learn more.

Wyze smart camera data leak exposes millions of customers

The maker of the seemingly-too-cheap-and-to-be-true smart home cameras Wyze has admitted a data breach, which has exposed the personal data of millions of customers.

The server leak, first revealed by consulting firm Twelve Security, has exposed the email addresses, SSID information and API tokens of a massive 2.4 million users.

The security company said usernames, device models, Wi-Fi SSID information and API tokens for iOS and Android users had been revealed. Alexa tokens from Echo camera users were also leaked, according to the blog post.

The company, which sells $20 cloud-connected indoor security cameras, has admitted the customer data was exposed for a period of three weeks, between December 4 and December 26. On Monday, Waze revealed a secondary database had also been exposed, but the firm is yet to reveal the information compromised as a result.

Related: Best VPN

In a blog post, the company denied the assertion the cheap cameras meant lax security, claiming it takes security as seriously as any company in the space. However, the company did admit it needed to revisit its security protocols to ensure consumer confidence is restored.

The company said that no customer passwords or financial information had been exposed by the breach.

In a blog post, the firm wrote: “We’ve often heard people say, “You pay for what you get,” assuming Wyze products are less secure because they are less expensive. This is not true. We’ve always taken security very seriously, and we’re devastated that we let our users down like this.

“This is a clear signal that we need to totally revisit all Wyze security guidelines in all aspects, better communicate those protocols to Wyze employees, and bump up priority for user-requested security features beyond 2-factor authentication.”

Do you have a Wyze camera? Does this shake your confidence in the firm? Let us know @trustedreviews on Twitter.

 

Why trust our journalism?

Founded in 2004, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.

Today, we have 9 million users a month around the world, and assess more than 1,000 products a year.

author icon

Editorial independence

Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.

author icon

Professional conduct

We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.