Google Nest Hub Bug Exposes Private Video Footage to Unauthorized Users

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

A serious bug in Google's AI-powered Nest Hub allowed a user to view private video footage from another person's Nest Cam, resulting in a privacy breach. Google responded by investigating the issue and rewarding the reporting customer, but the incident highlights risks of unauthorized data exposure in smart home AI devices.[AI generated]

Why's our monitor labelling this an incident or hazard?

The Nest Hub is an AI-enabled smart home device that processes video feeds and uses AI for its functionalities. The reported bug caused unauthorized exposure of private video footage from another user's Nest Cam, which is a violation of privacy and security, thus a harm to users' rights. The AI system's malfunction directly led to this harm. Although the fix status is unclear, the harm has already occurred. Hence, this is an AI Incident rather than a hazard or complementary information.[AI generated]
AI principles
Privacy & data governanceRobustness & digital securityAccountability

Industries
Consumer productsDigital security

Affected stakeholders
Consumers

Harm types
Human or fundamental rights

Severity
AI incident

Business function:
Other

AI system task:
Interaction support/chatbotsOther


Articles about this incident or hazard

Thumbnail Image

Google Gift Bombs Customer Who Reported Serious Nest Hub Bug

2020-05-22
Forbes
Why's our monitor labelling this an incident or hazard?
The Nest Hub is an AI-enabled smart home device that processes video feeds and uses AI for its functionalities. The reported bug caused unauthorized exposure of private video footage from another user's Nest Cam, which is a violation of privacy and security, thus a harm to users' rights. The AI system's malfunction directly led to this harm. Although the fix status is unclear, the harm has already occurred. Hence, this is an AI Incident rather than a hazard or complementary information.
Thumbnail Image

How to preserve some privacy when you're using a Google Assistant speaker

2020-05-22
Android Police
Why's our monitor labelling this an incident or hazard?
The article discusses the use of AI-powered Google Assistant speakers and how users can adjust privacy settings to limit data collection and exposure. However, it does not report any actual harm, violation, or incident caused by the AI system, nor does it highlight a credible risk of future harm stemming from the AI system's development or use. Instead, it serves as informational guidance to help users protect their privacy, which fits the definition of Complementary Information as it supports understanding and managing AI-related privacy concerns without reporting a new incident or hazard.
Thumbnail Image

Google has reportedly fixed user's Nest Hub that was seeing a stranger's camera, but we still have questions

2020-05-22
Android Police
Why's our monitor labelling this an incident or hazard?
The Nest Hub uses AI for smart home functionalities including video feed processing and alerts. The incident involved the AI system mistakenly displaying a stranger's camera feed to the user, constituting a malfunction that led to a privacy violation (harm to rights). The update issued by Google to fix the problem and the investigation indicate the AI system's role in the incident. Therefore, this qualifies as an AI Incident due to the realized harm (privacy breach) caused by the AI system's malfunction.