Senators Reveal AI Toy Maker Miko’s Data Breach Exposing Kids’ Replies

Recently, a significant data breach involving an artificial intelligence toy maker has raised serious concerns about child privacy. Senators Marsha Blackburn (R-Tenn.) and Richard Blumenthal (D-Conn.) informed the public about the exposure of thousands of conversations between Miko toys and children. This alarming revelation was shared in a letter dispatched to various manufacturers of AI-powered children’s toys.

Details of the Data Breach

According to the senators, their research indicated that Miko had left an unsecured database visible to the public. This database reportedly contained audio responses from Miko toys, offering access to discussions with children. The senators noted that these audio files often included identifiable children’s names and conversation details, raising fundamental questions about the company’s commitment to data privacy.

Key Findings from the Senators’ Investigation

• The exposed database was accessible online and contained responses from Miko toys dating back to December 2025.
• The audio files were categorized in numerous subfolders based on language, with folders labeled for both “GOOGLE” and “AZURE” services.
• The investigation utilized freely available tools to analyze Miko’s communications, revealing concerning security oversights.

Miko’s Response to the Allegations

In reaction to the concerns raised, Miko CEO Sneh Vaswani denied any breach of user data. He emphasized that the company does not store children’s voice recordings and claims that no personal information was made publicly available. Vaswani assured that Miko is preparing a detailed response to the senators’ letter.

Concerns from Experts

Privacy advocates, such as Miranda Bogen from the Center for Democracy and Technology, emphasized that the lack of security measures regarding children’s interactions with AI toys reflects a serious disregard for user privacy. There is growing alarm about the safety and ethical implications of AI in children’s toys.

Subsequent Actions by the Senators

Following the incident, Senators Blackburn and Blumenthal reached out to other AI toy manufacturers, such as Curio and FoloToy. They sought information about how these companies secure children’s data and what parental controls are in place. Notably, prior reports indicated problematic content from FoloToy’s Kumma bear, which had suggested dangerous actions to users.

Future Commitments and Responsibilities

Both Miko and Curio acknowledged the heightened responsibility required when applying AI in products for children. Curio stated it is engaging meaningfully with the senators and aims to ensure transparency in data handling. Meanwhile, FoloToy had not yet responded to inquiries about the safety of its data practices.

This incident serves as a stark reminder of the vulnerabilities present in AI-powered children’s products. Parents must remain vigilant concerning how companies protect children’s data and engage in ongoing discussions with industry leaders on privacy standards.