In the wild
Realized harm
Attackers took remote control of Ecovacs Deebot X2 robot vacuums across US homes, watching camera feeds and shouting slurs through the speakers
AIR-2024-0031 AIR record · 2024-05-ecovacs-deebot-x2-remote-takeover-harassment
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Robot vacuums in multiple US cities were hacked in the space of a few days, with the attacker physically controlling them and yelling obscenities through their onboard speakers.boingboing.net
The record
Disclosed
2024-08-10
Occurred
2024-05
Vendor
Ecovacs
Product
Ecovacs Deebot X2
Risk domain
Agent output quality › Bias and toxicity
Also touches
Sensitive data exposure
System type
Not AI
Who acted
AI was the target (contested) — Bluetooth/cloud authentication bypass in a device merely marketed as smart
Attack surface
Computer-use agent
Autonomy level
Semi-autonomous
Initial vector
Authentication bypass bluetooth and cloud
Impact type
Privacy violation, Harassment, Information disclosure
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI09 – Human-Agent Trust Exploitation
- MITRE ATLAS
- AML.T0048 – External Harms
- NIST AI RMF
- MEASURE 2.11
- EU AI Act
- Recital 45
- ISO/IEC
- TR 24028; 23894
- AIUC-1
- F. Society
- Scope
- agent failure
- Mitigation
- Audit and curate training data for representation; Implement content filtering on inputs and outputs.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
robot vacuums in multiple US cities within days; researchers said the underlying flaws remained after the vendor's fix
Capability abused
Defense & remediation
Recorded defense
4-digit PIN over Bluetooth; cloud account controls
Guardrail kinds
Unknown
Guardrail outcome
Silent
Fix shipped
Ecovacs claimed a fix; DEF CON researchers reported residual exposure
Taxonomy & references
Curator notes
Named victim Daniel Swenson (Minnesota) watched a stranger drive the device and access its live camera. Disclosed by Dennis Giese and Braelynn at DEF CON 32; ABC News Australia independently reproduced the takeover. An embodied agent with cameras, microphones and a floorplan of your house is a surveillance implant once its authentication fails. AI Incident Database incident 842.
Supporting sources
Cite as
Enkrypt AI. "Attackers took remote control of Ecovacs Deebot X2 robot vacuums across US homes, watching camera feeds and shouting slurs through the speakers". AIR, AIR-2024-0031. https://agentincident.vercel.app/i/AIR-2024-0031/ (accessed 2026-10-19).