By Andy Greenberg
Publication Date: 2026-01-29 17:00:00
Even now that the data is secured, Margolis and Thacker raise questions about how many people at companies that make AI toys have access to the data they collect, how their access is monitored, and how well their credentials are protected. “This has cascading implications for privacy,” Margolis says. “All it takes is one employee having an incorrect password and then we’re back where we started, where everything is exposed to the public internet.”
Margolis adds that this type of sensitive information about a child’s thoughts and feelings could be used for horrific forms of child abuse or manipulation. “To be honest, this is every kidnapper’s dream,” he says. “We’re talking about information that allowed someone to lure a child into a really dangerous situation, and it was essentially available to anyone.”
Margolis and Thacker point out that beyond accidentally exposing his data – based on what they saw in his admin console – Bondu also appears to be using…
