Skip to content
Submit incident
AII-1001-18857
ReportedReported by fewer than three independent publishers, with no official finding.Supporting sources are pending verification.

Spanish Engineer Uncovers Security Flaw in Robot Vacuum Cameras

A Spanish software engineer reportedly uncovered a security flaw that allowed access to the live camera feeds and location data of approximately 7,000 robot vacuums, exposing thousands of homes. The engineer disclosed the vulnerability to the manufacturer in good faith, and the security flaw was closed.

10 March 2026 · Spanish software engineer · Privacy and surveillance
10 March 2026
AII-1001-18857
Quick facts
Category
Privacy and surveillance
Country
Spain
Date
10 March 2026
Drafted by
Raidu Incident Detection

What happened

A Spanish software engineer used reverse engineering to develop custom software that gained access to the live camera feeds and location data of approximately 7,000 robot vacuums.

The engineer reportedly disclosed the security flaw in good faith to the manufacturer, which closed the vulnerability.

Reported impact

The vulnerability exposed thousands of homes where residents appeared in their private spaces, described as the most intimate areas in which people are at ease.

Index analysis

Bilişim Uzmanı Prof. Dr. Ali Murat Kırık noted that devices with internet connections, cameras and microphones—including robot vacuums, smart home appliances and baby monitors—carry potential security risks, particularly models with outdated software and weak network security.

The expert stated that 100% digital security is not possible, and that external access to these devices or discovery of security vulnerabilities can enable unauthorized access from outside.

Classification

Category
Privacy and surveillance
Industry
Robots, sensors and IT hardware
Country
Spain
Harm status
Actual harm
Intent
Unintentional
Timing
Post-deployment
Harmed
General public
Failure modes
Data leak
AI systems
Robot vacuum with live camera and location tracking

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident