The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Security researcher Sammy Azdoufal discovered that Energize Lab's Eiliko AI companion robots stored over 13 million conversations and profiles, including children's data, on insecure Chinese servers. The flaw allowed remote hijacking of robot personalities, enabling abusive or explicit responses. Energize Lab failed to secure data or respond to the breach, affecting users globally.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event clearly involves an AI system (the AI companion and large language model in the robot toy) whose use and malfunction have directly led to significant harm: unauthorized access to private conversations and personal data, violation of privacy rights, and malicious hijacking of the AI's personality to produce harmful and inappropriate content. The harm affects children and other users, constituting violations of human rights and harm to communities. The company's failure to secure data and respond to the breach further confirms the incident's severity. Hence, this is an AI Incident rather than a hazard or complementary information.[AI generated]