One man accidentally gained access to thousands of robot vacuums, exposing the AI cyber nightmare risk facing millions of Americans

Fortune

by Nick Lichtenberg

February 25, 2026

AI-Generated Deep Dive Summary

A software engineer accidentally discovered a critical security flaw in DJI’s robot vacuum system while trying to control his device with a PlayStation 5 controller. By reverse-engineering how the vacuum communicated with its remote servers, he gained unauthorized access to nearly 7,000 devices across 24 countries, enabling him to view live camera feeds, activate microphones, and even create floor plans of strangers’ homes. This incident highlights a significant vulnerability in the rapidly growing smart home device market. The rise of internet-connected devices has created a massive security gap. With over 54 million U.S. households already using smart home technology as of 2020, companies are increasingly integrating AI and automated systems into daily life. The potential risks extend beyond individual privacy concerns to broader enterprise-level data exposure. Recent research from Thales reveals that 70% of organizations now identify AI as their top data security risk, largely due to challenges in controlling access and managing credentials. This issue is particularly concerning when considering the growing integration of advanced robots in homes, such as those developed by Tesla and Figure. The lack of visibility into where sensitive data resides—only 34% of companies know the exact location of their critical information—exacerbates the problem. Additionally, enforcing “least-privilege access” becomes nearly impossible when AI systems operate across vast cloud environments, making them highly susceptible to credential theft. The potential consequences of such vulnerabilities are staggering. Imagine an attacker leveraging compromised credentials to control entire communities’ smart home devices, creating a nightmare scenario for individuals and businesses alike. As the market for humanoid robots expands, these risks will only increase, raising critical questions about trust and security in automated systems. The incident underscores the urgent need for stronger data controls and more responsible AI integration to protect both consumers and enterprises from escalating cyber threats.

Verticals

businessfinance

Originally published on Fortune on 2/25/2026