CloudPets
CloudPets were a line of Internet-connected soft toys manufactured by now defunct Spiral Toys that was the subject of numerous security vulnerabilities in February 2017. The plush teddy bear-style toys used Bluetooth to connect to a parent's smartphone to allow distant family members to send voice messages to the toy, and allow children to send voice messages back. Security researchers demonstrated that the toy itself was insecure and could be trivially accessed via Bluetooth.
CloudPets
- Name
- CloudPets data breach
- Field
- stuffed toy
VALÉORINE Encyclopedia
VALÉORINE documentary reading
Documentary summary
CloudPets were a line of Internet-connected soft toys manufactured by now defunct Spiral Toys that was the subject of numerous security vulnerabilities in February 2017. The plush teddy bear-style toys used Bluetooth to connect to a parent's smartphone to allow distant family members to send voice messages to the toy, and allow children to send voice messages back. Security researchers demonstrated that the toy itself was insecure and could be trivially accessed via Bluetooth.
Admitted source layer · organised and presented by VALÉORINE
Reference Check
Propose documentary evidence for CloudPets. A contribution is never written directly as fact: identity, source, rights and evidence gates still decide.
Sign in to contribute
World of VALÉORINE
Documentary connections
Only confirmed graph relationships appear here. Images are shown only when their identity and reuse rights both pass the documentary gate.
Documentary evidence
Documentary basis
Authority files
wikidata · Q39086759
In this article
Overview
Overview
The personal records of over 820,000 owners of the toy were stored in an insecure MongoDB database. Attackers also replaced the database with a ransom demand pointing to a Bitcoin address. Data retrieved from the CloudPets database was sent to the Australian security researcher Troy Hunt who included it in Have I Been Pwned?, a database of users whose data has been compromised. The database of user records also contained links pointing to over 2.2 million audio files hosted on Amazon Web Services containing the voice messages sent to and from the toys. Hunt stated that the database hack was "ridiculously easy". Following disclosure of security vulnerabilities, CloudPets started enforcing stronger password requirements on users of the service—they had previously not enforced any password complexity requirements and their documentation had suggested short, weak passwords. Numerous journalists and security researchers including Hunt noted that the company was non-responsive to disclosures from security researchers and enquiries from journalists.
Key facts
Key facts
• Name — CloudPets data breach • Date — February 2017 • Type — Cyberattack, Data breach • Theme — Ransomware, insecure database • Outcome — Over 820,000 user records and 2.2 million voice recordings leaked
Notes from the source article
Cited by Wikipedia
Notes from the source article
These works are cited by the source article, in its own numbering. They are recorded as its citations, not as sources VALÉORINE has verified.
- 1.Mathews, Lee. The Latest Privacy Nightmare For Parents: Data Leaks From Smart Toys. Forbes.
- 2.Kan, Michael. Smart teddy bears involved in a contentious data breach. Network World.
- 3.Hern, Alex. CloudPets stuffed toys leak details of half a million users. The Guardian. 2017-02-28. 0261-3077.
- 4.Larson, Selena. Stuffed toys leak millions of voice recordings from kids and parents. CNNMoney. 2017-02-27.
- 5.Children's messages in CloudPets data breach. BBC News. 2017-02-28.
- 6.CloudPets' data breach underlines need for secure cloud apps. ComputerWeekly.
- 7.Cooper, Luke. Millions Of Private Messages Between Parents And Kids Hacked In Cloud Pets Security Breach. Huffington Post. 2017-02-28.
References
Citations
References
Each reference names the institution holding it, so a reader may go to the document itself.
authority record
Secondary witness
Connections
Knowledge graph
Connections
Each connection was recorded deliberately, with the basis for it kept on the internal record.
Broader subject
1- stuffed toyTerminology
Established from a fact already recorded on a verified source.
The Encyclopedia exists whether or not anything is for sale. Corrections are recorded rather than overwritten, and every version of this record is kept. Published 16 August 2026.
Elsewhere in Collectables
20,755 published records in this field, each with its sources named.
- Cloud MasterWork
- Cloudberry KingdomWork
- CloudbuiltWork
- CloudheimWork
- CloudpunkWork
- Cloudy with a Chance of MeatballsWork
- Clover Heart'sWork
- Clowns and BalloonsWork
Best supported in this field
For owners
Own an object connected with CloudPets?
A specialist will read what you send and tell you what the house can establish, what it cannot, and whether the object is suited to sale. There is no charge and no obligation. The object stays with you throughout; nothing is shipped to us unless it is arranged in writing beforehand.