PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Report: VTech Breach Exposed Photos of Kids, Chat Logs

 & Stephanie Mlot Contributor

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

It turns out the VTech hacker is hoarding more than just the personal data of millions of customers.

The alleged mastermind behind the fourth largest consumer data breach told Motherboard that the hack exposed other sensitive information, including children's photos and chat logs between kids and parents.

The hacker, whose identity was not revealed, said he or she was able to collect conversations and headshots from the company's Kid Connect service, which allows parents and kids to chat via a smartphone app and VTech tablet. The oldest logs were dated from the end of 2014; the most recent came from last month.

The company did not immediately respond to PCMag's request for comment.

A Nov. 14 hack of the Learning Lodge database exposed names, email addresses, passwords, home addresses, and download histories of 4.8 million adults who purchased products online. The first names, genders, and birthdays of more than 200,000 kids were also exposed. VTech's customer index does not contain credit card information.

Speaking with Motherboard via encrypted chat, the hacker shared a sample of more than 3,830 image files, none of which he or she intends to publish or sell. "Frankly, it makes me sick that I was able to get all this stuff," the hacker said. "VTech should have the book thrown at them."

Anyone in possession of this data could possibly link the children to their parents, exposing families' full identities.

VTech has temporarily suspended its Learning Lodge app store and a number of related websites for "thorough security assessment and fortification," and is working with regulators in Hong Kong for a "compliance check."

The company alerted customers of potential exposure following the hack, and users are encouraged to follow up via email (vtechkids@vtechkids.com in the U.S.). More details are also available on the VTech FAQ page.

About Our Expert

Stephanie Mlot

Stephanie Mlot

Contributor

My Experience

  • B.A. in Journalism & Public Relations with minor in Communications Media from Indiana University of Pennsylvania (IUP)
  • Reporter at The Frederick News-Post (2008-2012)
  • Reporter for PCMag and Geek.com (RIP) (2012-present)

My Areas of Expertise

  • Science & Space
  • Video Streaming Services
  • Social Media
  • Cars & Auto
  • Education

The Tech I Use

  • iPhone 12 Pro
  • MacBook Air (hooked up to a 23-inch Dell monitor)
  • Google Chrome
  • Google Drive
  • Soundcore Life P3 earbuds
  • Various Amazon Echo devices

Read full bio