Wyze

Wyze is a supplier of "smart" devices.

History

2019: Personal data leakage of 2.4 million clients

On December 30, 2019 it became known that the supplier of "smart" Wyze devices confirmed date leak from the server as a result of which in Network there was personal information about 2.4 million clients.

According to the cofounder of Wyze of Dongsheng Songa, the database was accidentally available on the Internet. In spite of the fact that the Elasticsearch server is not a production system, it stored user data. Elasticsearch represents the technology for ensuring superfast search queries created with the purpose to help the company to understand a huge number of user data.

The company copied some files from the primary production servers and placed them in more flexible database which it is simpler to address. The data warehouse was initially protected, however the employee of Wyze made a mistake therefore the previous protocols of security for important information were deleted.

Such information as the e-mail addresses of clients for Wyze accounts, the names appointed by users to security cameras snared, the SSID identifying of Wi-Fi-network and tokens of the voice assistant to Alexa used for connection of Wyze devices to devices of Amazon^[1].

Notes