A Virginia Tech professor who specializes in cyber-security issues says parents need to keep privacy and security risks in mind when buying toys that connect to the Internet. Aaron Brantly says many parents give their children such toys without setting proper safeguards before they are used. Without those safeguards, he says, hackers can learn plenty about a child’s location, preferences and behavior. WFIR’s Evan Jones has more:
NEWS RELEASE: Parents who purchase electronic toys for their kids this holiday season should keep in mind the privacy and security risks associated with toys that are connected to the internet.
“Toys or devices that connect to the internet are always hackable and collecting data on your child. While it doesn’t mean it will happen, the possibility exists,” says Virginia Tech’s cybersecurity expert Aaron Brantly. “A hacked toy can provide a window into your private home life with audio and video access. Insecure devices on a home Wi-Fi network can also provide a portal to potentially access other devices within the network.”
Brantly explains that internet connected toys often collect substantial information on children and their families. “From internet enabled dolls to video games and smart TVs, toys can collect data on what a child likes or dislikes, and track behavioral patterns and responses to given prompts. Information can also include financial information of the parents, particularly for those devices that have games that are pay as you go.”
To avoid these cyber risks, Brantly offers the following advice for parents.
Cybersecurity Tips for Parents:
1. Use complex passwords for toys that require it and two-factor authentication is available.
2. If a payment option for recurring expenses is required, use a payment service such as ApplePay, GoogleWallet, or PayPal vs. a credit card.
3. Read the terms of service for a toy or device.
4. Understand what data the toy or device collects and where that data goes.
5. Safeguard your personally identifiable information.
6. Do not provide credit cards or other financial data.
7. Help your child use the toy and monitor access.
8. Disable geolocation access to prevent location specific information from being intercepted.
9. Keep in mind that smaller toy companies are often unable to provide the best digital security for their products or their corresponding databases.
10. No apps are free! Applications (apps) that are free make their money by collecting and selling personal information.
