Services in the field of Internet of Things (IoT) involve a high risk of confidential data loss. One such example can be recent database leak of ORVIBO Technology Co, a Chinese manufacturer of smart home solutions. This company has millions of users around the world.

The company manufactures gadgets intended for smart homes, linked to lighting, power, security and entertainment systems.

According to the website Niebezpiecznik, which cites report of vpnMentor on recent leak of database which included 2 billion logs concerning various devices. The database contains information such as e-mail addresses with usernames and passwords, codes for resetting accounts, as well as device location data, which indicates the exact address of the user!

Niebezpiecznik informs that the experts from vpnMentor have reviewed the logs which included users from such countries as China, Japan, Thailand, USA, UK, France, Australia and Brazil.

Using the database, cybercriminals can attempt account takeover by resetting the password, which is especially dangerous if user is an owner of a smart camera.

Despite receiving information on the attack the ORVIBO Technology Co did not take any actions to secure the data of its clients.