---
id: 1384
title: "Hacking An AI Children's Toy: Remote Access to Every Conversation"
source_domain: josephthacker.com
source_url: "https://josephthacker.com/hacking/2026/01/29/bondu-smart-toy-vulnerability.html"
published_at: "2026-01-29 00:00"
tags: ["ai-security", "data-exposure", "iot", "vulnerability-disclosure", "broken-access-control", "ai-toys", "child-safety"]
phying_url: "https://phying.com/item/1384"
lang: en
---

# Hacking An AI Children's Toy: Remote Access to Every Conversation

## Summary

Bondu's AI children's toy admin console was open to any Google login, exposing tens of thousands of child-toy conversation transcripts plus children's names, family details, and device data.

## Intelligence Metadata

- **Sources:** josephthacker.com
- **Published:** 2026-01-29 00:00
- **Original:** https://josephthacker.com/hacking/2026/01/29/bondu-smart-toy-vulnerability.html
- **Phying News:** https://phying.com/item/1384