Bondu AI toy exposes 50,000 children's chat transcripts via unsecured web portal
Security researchers discovered that Bondu AI-enabled stuffed toys left a web portal unsecured, allowing anyone with a Gmail account to access over 50,000 transcripts of children's conversations with the toys, along with personal details including names, birth dates, and family information. The company shut down the portal and implemented authentication controls after being alerted to the vulnerability.
What happened
Security researchers Joseph Thacker and Joel Margolis discovered that Bondu's web-based portal could be accessed by anyone with a Gmail account. Without performing any hacking, the researchers logged in with an arbitrary Google account and immediately gained access to transcripts of children's conversations with the AI-enabled stuffed toys.
The exposed data included over 50,000 chat transcripts along with children's names, birth dates, family member names, parental objectives for each child, and detailed summaries of conversations between children and their Bondu toys. Bondu confirmed that essentially all conversations the toys had engaged in were accessible through the exposed portal, except for those manually deleted by parents or staff.
Reported impact
The exposure allowed anyone with a Gmail account to access intimate one-on-one conversations that the toys were designed to elicit from children, along with their documented preferences, favorite snacks, dance moves, and pet names they had given their toys. Thacker described the data exposure as intrusive and stated it was 'a massive violation of children's privacy.'
Index analysis
The web console lacked basic authentication controls, suggesting inadequate threat modeling for sensitive child data. The vulnerability required no sophisticated hacking technique—merely logging in with a generic Google account granted full access to the portal.
Governance controls
Bondu shut down the exposed console within minutes of being alerted by the researchers and relaunched it the next day with proper authentication measures. CEO Fateen Anam Rafid stated that security fixes were completed within hours, followed by a broader security review and implementation of additional preventative measures for all users.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.