More than 2 million voice messages recorded on cuddly CloudPets soft toys has been discovered in an open database containing links. People can record and send greetings via a phone app marketed as cuddly devices to connect children to working parents or grandparents.
When the breach was discovered, California-based Spiral Toys immediately invalidated all customer passwords so no information could be accessed and advised customers to change their security details.
Research into the breach showed around 820,000 accounts to be visible.