Parents told to destroy baby doll because of spying fears

Hackers could talk and listen to children playing with My Friend Cayla

Aatif Sulleyman
Friday 17 February 2017 08:02 EST
Comments
The doll answers users’ questions by using a web connection
The doll answers users’ questions by using a web connection

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

An official German watchdog has told parents to destroy an internet-connected doll because hackers can use it to spy on children.

My Friend Cayla was found to be equipped with an insecure Bluetooth device, which cybercriminals could hijack, in order to steal personal data and listen and talk to the child playing with it.

Germany’s Federal Network Agency, the regulatory office for electricity, gas, telecommunications, post and railway markets, has now warned parents to destroy it.

A spokesman for the agency told Süddeutsche Zeitung that My Friend Cayla was a "concealed transmitting device", something that's illegal in Germany.

The doll answers users’ questions by accessing the web, but also asks for sensitive personal information, such as the user’s name, school, parents’ names and hometown.

A coalition of campaign groups last year filed a complaint with the Federal Trade Commission against Genesis, the company behind My Friend Cayla, alleging that the toys wrongfully collect data from children and sent it to Nuance Communications, a speech-recognition company that built the toy's accompanying app.

Similar concerns were raised about the i-Que Intelligent Robot, also created by Genesis.

“Researchers discovered that by connecting one phone to the doll through the insecure Bluetooth connection and calling that phone with a second phone, they were able to both converse with and covertly listen to conversations collected through the My Friend Cayla and i-Que toys,” read the FTC complaint.

Student Stefan Hessel first raised legal concerns about My Friend Cayla, telling Netzpolitik.org that a hacker could connect to its speaker and microphone system with a Bluetooth-enabled device from a range of 10m.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in