South Korea: Robot Vacuums Found to Have Security Flaws, Says Korean Watchdog
South Korea’s Personal Information Protection Commission (PIPC) has warned that several popular robot vacuum cleaners could put users’ personal data at risk.
In a joint inspection with the Korea Internet and Security Agency (KISA) and the Korea Consumer Agency, the commission looked at six robot vacuum models. The review found multiple security gaps that could potentially expose private information, including names, contact details, and even camera footage collected by the devices.
Key findings included:
Weak app security: Three brands — Narwal, Dreame, and Ecovacs — did not properly verify user logins, meaning outsiders could gain access to camera functions and saved images.
Data exposure: Dreame’s global website was found to be leaking personal details such as names and phone numbers.
Hardware vulnerabilities: Security was generally lacking across all devices, though Samsung and LG showed stronger protections compared to Dreame and Ecovacs.
The PIPC urged manufacturers to tighten security and protect consumer privacy. For now, consumers are advised to set strong passwords, keep software up to date, and check privacy settings on their devices.
The full report is available in Korean only - here