Connected toys are becoming more popular. They can call kids by name and can even remember likes and dislikes. This might seem like magic to children, but it's actually a highly technical computer system constantly recording and storing data about the people around it.
That data, including emails and selfies, can also end up in insecure places. For instance, hackers held the company behind CloudPets for ransom after finding more than 820,000 customer credentials on a database with no firewall or password-protection.
Some consumers aren't aware they're under surveillance, while others never find out their data was compromised. One study found most kids don't know other people can hear what they said to a connected toy. And in the CloudPets case, users weren't informed of the hack for at least two months.
But governments are putting safeguards in place to protect consumers. Earlier this year, the Federal Trade Commission said connected toys must comply with the Children's Online Privacy Protection Act. And German officials pulled a connected doll from shelves after they found it could be used to steal data.