Eiliko admits major security flaws in its connected robots

Eiliko, a small AI-powered robot designed to clip onto a bag, has exposed critical security vulnerabilities. According to an investigation by *The Verge* and researcher Sammy Azdoufal, hackers could access full transcripts of user conversations, as well as unprotected audio recordings and photos stored online. After months of silence from Energize Lab, the company finally responds by pledging an independent security review and the deletion of some collected data.

Energize Lab acknowledges the identified issues and announces immediate steps: closing external access to its systems, disabling remote modification interfaces for robot responses, and taking offline long-term memory and custom avatar features. The company commits to deleting already collected data and hiring a security firm to audit its infrastructure. However, it does not rule out permanently storing personal data, planning to reintroduce it once systems are secured.

The situation reveals a company in a trust crisis, taking over a month to respond to alerts. Experts note that the announced actions do not yet guarantee current security, with some critical access still active. Beyond the product itself, this case raises questions about data management in consumer IoT devices and corporate transparency regarding vulnerabilities.