Eiliko Robot Toy Exposes Global Privacy Risks for AI‑Connected Devices

The Eiliko robot, marketed as a friendly digital pet, streams every spoken interaction to servers located in China.

Security researcher Sammy Azdoufal discovered that the service lacks basic encryption, allowing anyone to pull transcripts, IP addresses, email addresses, and detailed user profiles that include age, occupation, and personal sentiments.

Why it matters for GPU / AI infrastructure

For AI hardware providers, the incident underscores the need for end‑to‑end encryption and strict data‑locality controls when deploying edge AI agents that collect voice or biometric data.

Organizations building GPU‑accelerated AI services must treat device‑to‑cloud pipelines as potential attack surfaces and enforce zero‑trust networking, secure boot, and regular firmware audits.

By adopting hardened infrastructure practices, companies can protect both their customers’ privacy and the integrity of their AI models.