Parents warned of 'worrying' security risks in Christmas 'smart' toys
Hackers can exploit security issues and talk to children through "smart" devices with "little technical know-how", Which? says.
Tuesday 14 November 2017 14:38, UK
A number of "smart" toys expected to be top sellers this Christmas have "concerning vulnerabilities" that could be exploited by hackers, a consumer group has warned.
Which? has written to retailers calling on them to stop selling the Furby Connect, i-Que Intelligent Robot, Toy-Fi Teddy, Cloud Pets and other connected devices with security issues.
The product testing firm said "very little technical know-how" is needed to access the toys, which are designed to allow children to send and receive messages.
Which? found that the connections on the children's products are unsecured, meaning they can be accessed without a password, PIN code or any other authentication.
Anyone within 10 to 30 metres of Hasbro's Furby Connect can connect via Bluetooth when it is switched on, with no physical interaction required and no security measures obstructing the pairing process.
Hasbro said manipulating the toy as Which? had done would require "a number of very specific conditions that would all need to be satisfied", but added that it took the report "very seriously".
For the i-Que robot, anyone is able to use its voice to talk after downloading the associated app and finding one of the toys within Bluetooth range.
Vivid Imaginations, which distributes the robot on behalf of manufacturer Genesis, downplayed fears over its security, adding that its toys fully comply with the Toy Safety Directive and European standards.
But it said it would be "communicating the issues" to Genesis and "actively purse the matter with them directly".
Spiral Toys, the maker of Cloud Pets and Toy-Fi Teddy, has declined to comment on the concerns raised.
Which? found that anyone can play voice messages through both products after connecting through Bluetooth, with the teddy even allowing children to send responses.
Alex Neill, managing director of home products and services at Which?, said: "Connected toys are becoming increasingly popular but, as our investigation shows, anyone considering buying one should apply a level of caution.
"Safety and security should be the absolute priority with any toy.
"If that can't be guaranteed, then the products should not be sold."