Wyze
Wyze Cloud Security Camera Breach
Incident
On two separate occasions from September 2023 to February 2024, Wyze personal security cameras were able to be accessed by other owners due to security failures.
In early September 2023, many Wyze security camera users reported being able to see the feeds of cameras that were not their own. A Wyze spokesperson reported this was due to a "web caching issue and is now resolved." Users throughout social media platforms such as Twitter and Reddit reported this issue and within 30 minutes, the camera view portal was shut down.[1]
In late February 2024, after bringing servers back from a company outage, about 13,000[2] users were able to view thumbnails from another users cameras with about 1,500[2] being able to view the video.[3][4]
Implications
Security cameras are a tool used by those looking for companies to make resources to protect them. These incidents show Wyze security cameras did not have the capabilities to protect their users. The Verge reports Wyze was aware of security flaws in the WyzeCam v1 cameras for more than 4 years but discontinued the product rather than fixing the issue.[1] Discontinuing the product does not help those who already own the product, and it is the nature of cloud cameras that the consumer must trust companies to deliver the proper security patches to protect their private information.