Wyze, a security camera company with 10 million users, is suffering from a breach that allowed 13,000 customers to peer into other people’s homes.
Company co-founder Dave Crosby announced Friday that employees had identified 14 people who were able to briefly view images from strangers’ Wyze cameras.As of Monday, that number was balloon-shaped up to 13,000reports The Verge.
In a mass email to customers Friday morning, Wise apologized for the incident and shifted the blame to a third-party web host.
“The outage came from our partner AWS and caused Wyze devices to go down for several hours early Friday morning. If you tried to watch live cameras or events during that time, you likely couldn’t,” said Wyze. said. “We are very sorry for the frustration and confusion this has caused.”
While Wyze worked to bring cameras back online from the breach, customers reported strange images and videos in the Events tab, so the company disabled access to this section while it investigated the mistake. I decided to do it.
The company says the error is caused by a “third-party caching client library.”
However, a similar incident occurred last year in which 2,300 users were able to see through a stranger’s camera.
“Simply put, up to 2,300 users who were logged in to the online web browsing portal for approximately 40 minutes were affected, passing through several wires on the backend, with 10 users logged in during that time. You may have seen the camera of one of our users.” Wise Said On September 22, 2023.
This time, Wyze says 1,504 people enlarged the thumbnail of someone else’s camera, and several people actually watched the video footage.
“The company also claims that all affected users have been notified of the breach and that more than 99 percent of all customers are unaffected,” The Verge reported.
A Reddit user who identified herself as a “23-year-old girl” report I felt disgusted and angry when I received the email:
shock. I am a 23 year old woman and she was getting ready for her work during the power outage. Also, please refrain from commenting that she “just leaves the camera outside.” There are sick animals at work, so you have to look at them from all angles. I’m so disgusted and upset. I have already deleted my account and I feel very violated.
in post Crosby said on the r/wyzecam subreddit that the incident “affected just under 0.25 percent of Wyze users, including users who received the thumbnail and users who had the thumbnail sent to another account.” .
The co-founder also told customers that Wyze’s engineering team has “added a new layer of validation between users and event videos to prevent something like this from happening again.”
“We have also removed the client library. We will not use the cache until we can find a new client library and stress test it against extreme scenarios like the one we saw on Friday,” Crosby continued, adding that the investigation is still ongoing. It added.
