Smart camera company Wise announced last week that its network suffered an outage that allowed some users to view other users’ security camera footage.
Wyze said in a post that its AWS cloud service experienced an outage on Friday that caused Wyze cameras to be down for several hours.
As the company worked to restore camera feeds, a security issue emerged that allowed certain users to see thumbnails and videos from cameras that didn’t belong to them.
“Some users[イベント]”We have reported that tabs are showing incorrect thumbnails and event videos,” Wyze said.
“We immediately[イベント]I removed access to the tab and began an investigation. ”
“While cameras are coming back online, we can confirm that approximately 13,000 Wyze users received a thumbnail from a camera that did not belong to them, and 1,504 users tapped it. expanded, and in some cases event videos were available for viewing,” the company said.
Wyze blamed the incident on a recently integrated third-party caching client library. “Devices came back online en masse, creating unprecedented load conditions.
As a result of increased demand, the mapping of device IDs to user IDs became confused, resulting in some data being associated with the wrong account. ”
To prevent similar issues from happening again, the company added a new layer of validation before users connect to event videos, and said it would “until we thoroughly identify which client libraries are under stress to ensure that users and devices It also bypasses the cache to check the relationship,” he added. Tested for extreme events like the one we experienced on Friday. ”
“I know this is very disappointing news,” Wise wrote.
“This does not reflect our commitment to protecting our customers, nor does it reflect the other investments and actions we have taken in recent years to make security a top priority at Wyze.”
Wyze said it has notified all affected users and sent notifications to different user groups based on whether the video was seen by others, tapped and watched.
The company also notified all users about the incident and said that “99.75% of all Wyze accounts were unaffected by the security event.”
Wise did not immediately respond to a request for comment.
