{"schema_version":"0.10.0","id":"LR-2026-0393","record_version":1,"title":"Bondu AI plush toy exposed about 50,000 children's chats through an open web console","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":59.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":4.48,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":2,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"47de3d5c7749dd1390e7d5db80dbbcd4abc6d6b944988822128f1746d5f48596"},"system":{"model_name":null,"model_version":null,"developer":"Bondu","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"A soft, cuddly toy powered by AI that can chat, teach, and play with your child.","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-02-03","incident_class":"privacy_leakage","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Bondu sold an AI plush toy marketed as a soft companion that can chat, teach and play with a child. Its public-facing web console let anyone with a Gmail account log in and read transcripts of children's chats with their toys, and no hacking was needed. Two researchers found the exposure by logging in with an arbitrary Google account. The chat logs revealed names, birth dates, family details and intimate conversations, and the report cites about 50,000 chats. Bondu took the console offline within minutes of disclosure and relaunched it with authentication. The CEO said fixes were completed within hours, reported no evidence of other access, and said a security firm was brought in and monitoring added.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication.","precursor_events":null,"primary_risk":"RK04","secondary_risks":["RK15"],"remediations":[{"by":null,"kind":"fix","date_reported":null,"controls_added":["A1"],"quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication.","source_index":0,"reviewed":false},{"by":null,"kind":"fix","date_reported":null,"controls_added":["F2"],"quote":"The CEO said fixes were completed within hours, they saw “no evidence” of other access, and they brought in a security firm and added monitoring.","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":50000,"third_parties_affected_count":null,"severity":"major","severity_because":"Major test: scope is stated as virtually every child who used a Bondu toy, with about 50,000 private chats exposed.","harm_class":["privacy"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.malwarebytes.com/blog/news/2026/02/an-ai-plush-toy-exposed-thousands-of-private-chats-with-children","publisher":"Malwarebytes","date":"2026-02-03","type":"press","title":"An AI plush toy exposed thousands of private chats with children - Malwarebytes","archived_url":null,"attachment":"first_report"},{"url":"https://fox17.com/news/local/blackburn-blumenthal-probe-robotics-company-after-ai-toy-audio-found-publicly-accessible","publisher":"WZTV","date":"2026-02-13","type":"press","title":"Blackburn, Blumenthal probe robotics company after AI toy audio found publicly accessible - WZTV","archived_url":null}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","event.incident_class":"C","event.remediation":"C","impact.records_exposed":"C","impact.harm_class":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.remediations":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys."}],"system.intended_use":[{"source_index":0,"quote":"A soft, cuddly toy powered by AI that can chat, teach, and play with your child."}],"event.incident_class":[{"source_index":0,"quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys."}],"event.remediation":[{"source_index":0,"quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication."}],"impact.records_exposed":[{"source_index":0,"quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys."}],"impact.harm_class":[{"source_index":0,"quote":"The chat logs between children and their plushies revealed names, birth dates, family details, and intimate conversations."}],"impact.severity":[{"source_index":0,"quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys."}],"impact.severity_because":[{"source_index":0,"quote":"anyone with a Gmail account could read the transcripts from virtually every child who used a Bondu toy."}],"event.remediations":[{"source_index":0,"quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication."},{"source_index":0,"quote":"The CEO said fixes were completed within hours, they saw “no evidence” of other access, and they brought in a security firm and added monitoring."}],"event.summary":[{"source_index":0,"quote":"A soft, cuddly toy powered by AI that can chat, teach, and play with your child."},{"source_index":0,"quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys."},{"source_index":0,"quote":"Without any actual hacking, simply by logging in with an arbitrary Google account, two researchers found themselves looking at children’s private conversations."},{"source_index":0,"quote":"The chat logs between children and their plushies revealed names, birth dates, family details, and intimate conversations."},{"source_index":0,"quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication."},{"source_index":0,"quote":"The CEO said fixes were completed within hours, they saw “no evidence” of other access, and they brought in a security firm and added monitoring."}]},"notes_on_gaps":"Source 1 (WZTV, 2026-02-13) concerns a different incident: Miko, Inc. and its Miko 3 robot audio, with senators' letters. It was excluded from all fields. Source 0 gives no date of occurrence and no body date of disclosure; its article date (2026-02-03) was not used as date_disclosed. Source 0 does not state the root cause category, the detection method, the trigger, a responsible party, the country, the model name or version, the harness, or any time-to-contain duration; within minutes and within hours are not numeric durations and were not converted. The figure about 50,000 is quoted as approximate, so records_exposed is a stated approximation. Scope is described as virtually every child who used a Bondu toy and was treated as unbounded for the severity test. Judgements made: no autonomous agent was involved, so agent_involved is false and no failure_class was set; the link and remediation controls were chosen from the authentication and monitoring the source describes; the affected parties are children and their families as the source implies. Source 0 does not state that an adversary acted, so adversarial_actor was left out. Controls held or missing in this incident were not otherwise stated. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"The toy was marketed as an AI plush that chats, teaches and plays with a child.","quote":"A soft, cuddly toy powered by AI that can chat, teach, and play with your child.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"Its public web console let anyone with a Gmail account log in and read children's private chats.","quote":"Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys.","source_index":0,"grade":"C"},{"step":"reached","text":"The exposed chat logs revealed names, birth dates, family details and intimate conversations.","quote":"The chat logs between children and their plushies revealed names, birth dates, family details, and intimate conversations.","source_index":0,"grade":"C"},{"step":"caught","text":"Two researchers found the exposure by logging in with an arbitrary Google account, without hacking.","quote":"Without any actual hacking, simply by logging in with an arbitrary Google account, two researchers found themselves looking at children’s private conversations.","source_index":0,"grade":"C"},{"step":"done","text":"Bondu took the console offline, relaunched it with authentication, and reported fixes within hours.","quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.malwarebytes.com/blog/news/2026/02/an-ai-plush-toy-exposed-thousands-of-private-chats-with-children","https://fox17.com/news/local/blackburn-blumenthal-probe-robotics-company-after-ai-toy-audio-found-publicly-accessible"]},"analysis":{"sections":{"timeline":[{"text":"Safety and behaviour systems were built over 18 months of beta testing before the exposure.","quote":"Bondu’s safety and behavior systems were built over 18 months of beta testing with thousands of families.","source_index":0,"when":null},{"text":"Two researchers found the console open to any Google account login and viewed children's private conversations.","quote":"Without any actual hacking, simply by logging in with an arbitrary Google account, two researchers found themselves looking at children’s private conversations.","source_index":0,"when":null},{"text":"After disclosure, Bondu took the console offline within minutes and relaunched it with authentication.","quote":"Bondu took the console offline within minutes of disclosure, then relaunched it with authentication.","source_index":0,"when":null},{"text":"The CEO said fixes were completed within hours, reported no evidence of other access, and added a security firm and monitoring.","quote":"The CEO said fixes were completed within hours, they saw “no evidence” of other access, and they brought in a security firm and added monitoring.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.malwarebytes.com/blog/news/2026/02/an-ai-plush-toy-exposed-thousands-of-private-chats-with-children","https://fox17.com/news/local/blackburn-blumenthal-probe-robotics-company-after-ai-toy-audio-found-publicly-accessible"]}}