The smart home company Wyze has had a security breach on one of its servers. The information exposed data of 2.4 million users, including:
- Nicknames (optional name change in account settings)
- Device names
- User profile photos
- Email of user and anyone they shared camera access with
- List of all users’ cameras, device models and firmware
- Wi-Fi router names
- Some Alexa integration tokens
- Health information including height, weight, bone density, bone mass daily protein intakes, and gender for some users.
Related: Wyze Sense Security System Review
The breach did not include users’ passwords, cloud storage or financial data. It affected any users that made their accounts before December 26th, 2019, according to a recent blog post from Wyze. Twelve Security, a security consulting business based in Texas, originally reported the data breach.
Related: Wyze Cam Review
To combat the breach, Wyze added more protection levels to their databases, pushed a token refresh to all users and required users to re-integrate Alexa, IFTTT and Google Assistant. The company recommends that users change their passwords and turn on two-factor authentication, although many users had issue implementing their service.
Although Wyze does have employees and manufacturers based in China, the company claims that they don’t use the Alibaba Cloud or share any user data with the Chinese government or any other country. The breached server was based in the United States and uses Amazon Web Services, hosted in China without any customer information. Dongsheng Song, Co-Founder and Chief Product Officer of Wyze, wrote in the blog post,
“Thank you for your patience as we work through this process. We have been reading through everyone’s comments and are continuing to work together on methods to improve our security and ensure that similar occurrences never happen again.”
The exposed databases have been locked down, according to Wyze.
Is there a monthly fee for the Wyze Cam?
There’s no required monthly fee for the Wyze Cam or the Wyze Cam Pan. You’ll get local storage and 14 days of cloud storage for free. If you want complete motion recording, however, you can choose to pay an extra $1.49 per camera per month.
Is Wyze owned by Amazon?
Wyze is not owned by Amazon; they’re an independent company started by former Amazon employees.
Are Wyze cameras wireless?
Wyze cameras are not wireless. Rather, they plug into power.