New York Attorney General Letitia James announced on Tuesday that three companies behind Eufy security cameras will pay $450,000 in penalties following serious privacy breaches that left users' private footage exposed.
The companies - Fantasia Trading LLC, Power Mobile Life LLC, and Smart Innovation LCC - faced scrutiny after security researchers discovered major vulnerabilities in their camera systems in November 2022. The investigation revealed that video streams from Eufy cameras, including doorbells and smart locks, were accessible to anyone with the right link, even without authentication.
Despite marketing claims of "end-to-end encryption," many video streams were either inadequately encrypted or completely unencrypted, putting homeowners' private security footage at risk of unauthorized access.
"New Yorkers buy home security cameras to protect themselves and their homes," stated Attorney General James. "The eufy cameras' poor data security allowed anyone to access people's security camera footage, defeating the purpose of having a home security system."
The settlement requires the companies to implement stronger security measures, including:
- Establishing a comprehensive information security program
- Conducting regular vulnerability testing
- Implementing proper encryption for video streams during storage and transmission
This case highlights growing concerns about privacy and security in smart home devices. The settlement aims to protect consumers by requiring concrete steps to prevent future breaches of private security footage.
The companies must now demonstrate their commitment to user privacy through improved security protocols while paying penalties for their previous security failures.