Eiliko Robot Maker Apologizes for Security Failures, Hires Outside Firm to Audit Systems
Energize Lab says hackers could read complete Eiliko conversation transcripts and admits it failed to respond to researchers for over a month. The company shut external backend access, stopped storing records and profiles, and hired an independent firm to audit its systems.
Energize Lab, the company behind the Eiliko AI robot, has acknowledged serious security vulnerabilities in its product and outlined remediation steps taken in response to reporting by The Verge, published in October 2026.
The Eiliko is a small robot designed to hang on a bag and hold AI-powered conversations with its owner. Despite telling users that “your secrets are safe with me,” the device had significant security flaws. According to The Verge’s reporting, hackers could easily read complete transcripts of conversations users had with the toy, and additional vulnerabilities were also identified.
In a statement addressed to The Verge and security researcher Mr. Azdoufal, Energize Lab admitted it had failed to respond to the researchers’ initial disclosures for over a month, citing a failure to communicate with its technical team in a timely manner.
The company says it has since taken several immediate steps: closing all external access to its backend systems and rotating access credentials; disabling a feature that allowed a robot’s responses to be modified remotely; taking its long-term memory feature offline and stopping the storage of conversation records and user profiles; and taking its custom avatar feature offline. Energize Lab also says it will delete stored conversation records, user profiles, avatar images, and related content.
Going forward, the company says it is engaging an independent security firm to conduct a full review of its systems. The long-term memory and custom avatar features will not be restored until that review is complete. Energize Lab has also established a dedicated security inbox at security@energizelab.com.
The incident raises questions about data handling practices in consumer AI devices, particularly those marketed toward personal, conversational use. Energize Lab acknowledged in its statement that trust “only works if people can trust what is inside” its products, and that it intends to earn that trust back through its actions in the coming weeks.