Archive — US — techcrunch
Sex toy maker Lovense threatens legal action after fixing security flaws thatexposed users’ data
Lovense, a maker of internet-connected sex toys, has fixed two security vulnerabilities that exposed users' email addresses and allowed account takeovers. The CEO considers legal action regarding reports on the bugs' severity, as a security researcher disclosed the flaws after the company's delayed response. Lovense claims no user data has been compromised, but the event raises concerns about corporate responses to security disclosures.
Key points
- 1. Lovense reported fixing two security vulnerabilities in its products that exposed users’ email addresses.
- 2. The security flaws allowed potential account takeovers by malicious actors.
- 3. CEO Dan Liu stated they are exploring legal action against erroneous reports about the bugs.
- 4. The vulnerabilities were publicized by a researcher known as BobDaHacker after a slow response from Lovense.
- 5. Lovense claims no user data has been compromised despite inconsistencies in verification by TechCrunch.
Why it matters
- 1. This incident highlights ongoing concerns with IoT device security and user privacy, especially in sensitive sectors.
- 2. Legal threats against security researchers reflect a trend seen in 2023 where companies resist disclosure of vulnerabilities for reputational protection.
- 3. IT trends for 2025 increasingly focus on stronger protections for user data and ethical disclosure processes.
The Lovense security breach exemplifies the tension between user privacy and corporate accountability, stressing the need for better communication about vulnerabilities and the importance of safeguarding user data in an era where IoT devices proliferate.