Internet Connected Bears Hack Exposes 2 Million Voice Messages, 800K Credentials

Everyone who has kids loves getting them the latest cool toys available, but some of them are downright dangerous, especially those that are able to connect to the Internet, such as CloudPets. In fact, these adorable little plush toys just managed to leak 800,000 user account credentials and 2 million message recordings for anyone to listen to. 

It seems that between Christmas and until the first week of January, the company behind CloudPets, Spiral Toys, left customer data on a database that wasn't protected by a firewall or a password. Search engine Shodan, often used to find unprotected websites and servers, was put to use to find the MongoDB where all the CloudPets data was stored. 

So what was exposed? Well, more than 800,000 emails and passwords. Thankfully, they were secured with bcrypt, a hashing function that's stronger and harder to crack than others more frequently used. Troy Hunt, security researcher behind Have I Been Pwned, however,