Around 14,000 security cameras and baby monitors in Dutch households can be watched by malicious parties, RTL News writes Saturday.
These are cameras from the Chinese brands Apexis and Sumpple. The devices can be purchased at popular web stores such as Amazon and AliExpress. Bol.com also sold the products.
Research by RTL News shows that leaked e-mail addresses and passwords give easy access to the cameras. In this way people can watch live in the houses of others, without their knowledge.
The e-mail addresses and passwords of users are stored in an Apexis database. Apexis is the owner of the Sumpple brand. The database would be protected with a simple password, so that malicious parties can gain easy access.
The information is stored unencrypted, so that the passwords can be read. The camera's location information was also stored in the database.
Hackers group The Arcanum Group found the leak and reported it to Apexis and Sumpple in August. When there was no answer, the collective decided to visit the media.