Energize Lab Hires Security Firm After Eiliko Breach Exposed, but 1 Researcher Still Has Full SSH Access
Updated
Updated · The Verge · Oct 22
Energize Lab Hires Security Firm After Eiliko Breach Exposed, but 1 Researcher Still Has Full SSH Access
1 articles · Updated · The Verge · Oct 22
Summary
Energize Lab said it has confirmed the core flaws in its Eiliko AI toy and will hire an independent security firm, after The Verge reported hackers could read private chat transcripts and alter robot behavior.
Wednesday’s response also promised to shut external backend access, disable remote response editing, take long-term memory and custom avatars offline, and delete stored conversation records, user profiles and avatar images.
Sammy Azdoufal said the fixes were incomplete: he still had full SSH access to the robots, and unsecured public links still exposed customer audio recordings and photos when the company sent its statement.
After more than a month of unanswered outreach, Energize Lab apologized, created security@energizelab.com, and said memory and avatar features will stay offline until an outside review deems them secure.