Eiliko cloud service exposed private conversations and allowed remote memory and personality changes

The reporter's toy was tested directly; researcher-reported exposure extended to 13 million conversations and a fleet of 68,000 toys, not confirmed compromise totals

The Verge's Sean Hollister watched Sammy Azdoufal retrieve his complete August 30 conversation, then tested remote memory and personality changes on his own toy. August 30 dates that observed conversation exposure, not the initial discovery or later hijacks. AI-specific retention and writable memory put the service in scope, with the AI as target rather than an autonomous intruder. Real private conversations were readable and the reporter's device was altered; a fleet-wide malicious compromise, child harm and downstream misuse are not established. The 13 million conversations and 68,000 toys describe the researcher's reported reach, not independently verified victims. Confidence is medium under the contract's conservative treatment of news-only sourcing, despite the reporter's firsthand tests. The linked researcher/advisory pages were not fetched, so no CVE numbers or model identity are inferred. Energize Lab gave no substantive response or confirmed fix in the article.