Children's Photos Among Data Stolen in Hack of Toy Maker VTech A vigilante hacker's breach of 5 million accounts for the Hong Kong-based Internet-connected toy maker brings parents' worst nightmares into reality.

By Kim Lachance Shandrow

Opinions expressed by Entrepreneur contributors are their own.

Vtech Toys | Facebook

It's a parent's worst nightmare: Photos of their kids' smiling faces stolen by a stranger online, along with identifying information including their names, genders, birth dates, mailing addresses and the contents of their private chats.

Thanks to a security breach at toy maker VTech, that nightmare just became a reality for thousands of parents.Yesterday, the children's toymaker admitted that it's on the hook for exposing all of the above private data, plus additional personal information.

The alarming breach, apparently perpetrated by a white hat hacker on a mission to reveal cracks in VTech's security protocols, was first uncovered by Motherboard. The anonymous hacker told the publication that she has no intention of publishing or selling the stolen data. Her sole aim, she says, is to raise awareness and alert parents.

Related: What Every Online Business Needs to Know About the Children's Online Privacy Protection Act

"Frankly, it makes me sick that I was able to get all this stuff," she told Motherboard. "VTech should have the book thrown at them."

In addition to eyeing a flurry of proprietary personal data, she claims she accessed tens of thousands of photos of kids and parents on VTech's servers, many of them headshots.


The Hong Kong-based electronics giant confirmed in a statement that a Nov. 14 hack of its "Learning Lodge" app store database betrayed the intimate details of nearly 5 million adult customer accounts, including IP and email addresses, passwords, login secret questions and answers and device download histories. The statement does not mention the theft of photos.

Related: What Entrepreneurs Should Know About the Laws Protecting Children Online

While customers' credit card data was not compromised, the identifying information of some 200,000 children was also exposed. Learning Lodge enables VTech product users -- mainly kids -- to download educational games, ebooks and apps to their Internet-connected VTech toys.

If not for Motherboard's investigation into the anonymous hacker's claims, VTech might never have picked up on its servers' vulnerabilities. VTech claims it has since corrected its server susceptibilities and says it is taking added steps to bolster security. The company has also emailed every customer in its Learning Lodge database to inform them of the hack.

Related: Classroom Tech Delivers 'No Noticeable Improvement' in Student Performance, Study Finds

Kim Lachance Shandrow

Former West Coast Editor

Kim Lachance Shandrow is the former West Coast editor at Entrepreneur.com. Previously, she was a commerce columnist at Los Angeles CityBeat, a news producer at MSNBC and KNBC in Los Angeles and a frequent contributor to the Los Angeles Times. She has also written for Government Technology magazine, LA Yoga magazine, the Lowell Sun newspaper, HealthCentral.com, PsychCentral.com and the former U.S. Surgeon General, Dr. C. Everett Coop. Follow her on Twitter at @Lashandrow. You can also follow her on Facebook here

Editor's Pick

Related Topics

Growing a Business

More Than 90% of Startups Don't Make It. This CEO Reveals What It Takes to Not Only Survive — But Thrive.

Learn what it takes to grow a company while also scaling as a leader.

Business Plans

She Wrote An 'Escape Plan' to Quit Her Job and Move to an Island. Now She's There Generating Nearly $300,000 A Year

"My detailed, step-by-step plan on how I would quit my job and move to a Caribbean island."

Business News

A Woman Is Suing a Popular Salad Chain After Allegedly Finding a 'Chopped' Human Finger in Her Bowl

The incident allegedly occurred at a Chop't location in Mount Kisco, New York, on April 7, 2023.

Business News

Apple Moves to Sever Ties With Goldman Sachs — Here's What That Means for Apple Card and Savings Holders

The end may be near for one of the most prominent alliances between a technology firm and a banking institution.

Starting a Business

How Business Community Is Making CEO Life Less Ghastly

People are starting to notice that if you want to get the best out of entrepreneurs, you have to support them. But how?

Business News

Mac Without Cheese? Kraft's Newest Product Is Going Vegan

Kraft is releasing a plant-based version of its iconic Mac & Cheese called "NotMac&Cheese."