Itus Protect Free Trial
Itus Protect Free Trial

Christmas Cheer or Cyber Fear? Navigating Smart Toys This December

The festive season is here, and parents everywhere are preparing for Christmas shopping. Among the must-haves on many wish lists are smart toys - interactive devices that promise to educate, entertain, and engage. However, whilst these toys bring innovation into your home, they may also bring hidden risks. Could a seemingly harmless smart toy invade your family privacy and expose your family to cyber threats?

In this blog, we’ll help parents navigate the world of smart toys, equipping you with essential tips to protect your family’s privacy and security while embracing the joy these gadgets bring. 

What is a Smart Toy?

The popularity of Smart Toys has risen in recent times and their presence is felt on most Christmas shopping lists.  Things like smart speakers (think Echo Dot Kids or Google Nest), kids smart watches (Garmin has a junior version, or the iTime Smart Watch is specifically marketed at kids to count steps, monitor sleep or receive calls or texts), tablets, smart phones, gaming consoles or even a TonieBox are all examples of Smart Toys.

Subodha Kumar, the Paul R. Anderson Distinguished Chair Professor of Statistics, Operations and Data Science, Temple University explains, “Smart toys are very similar to any other smart device in that they have the capability to interact. Children can ask them questions, and they will respond, sort of like ChatGPT. And there is a big continuum of smart toys. Some are smarter than others, but by and large, smart toys have a computer processor, some kind of audio-visual component like a microphone and camera, and they try to mimic human intelligence.”  

He continues: “Like smart devices, many smart toys collect data. When a child asks the device a question, that information is collected and stored. These devices can collect video and audio data. They can collect data on eyeball movement. They can even track the physical location of the toy.”  It is therefore important that we put the correct measures in place to address any potential cyber risk or data privacy concerns before purchasing for our children this Christmas.

Understanding the Hidden Risks

IoT (Internet of Things) devices (more on the definition of this available by clicking this link here), including smart toys, connect to the internet and can be exploited by hackers if poorly secured. These attacks can lead to unauthorised access to home networks, allowing cybercriminals to spy on families or steal personal data. These risks underscore the importance of understanding and managing the safety features of connected toys.

One recent example involves Roblox, a popular online platform for kids, banning certain messaging features for children. This measure came after increasing concerns about predators exploiting communication tools to contact minors. While this action highlights growing awareness among tech companies, it also underscores the risks associated with any device or platform that enables communication.  As recently as last year, prominent TikTok content creator, Kurin Adele shared a viral video which claimed that her family’s Owlet (a wifi enabled baby monitor) was hacked

These risks make it crucial for parents to understand and manage the safety features of connected toys and online platforms their children use.

How to Protect Your Family This Christmas Season

The good news is, there are proactive steps that parents can take to prevent against these types of attacks.  Parents play a crucial role in ensuring that smart toys are a source of joy, not concern.  As with any security concern – be it personal or professional, getting ahead and tackling the issue head on is essential.  

Here are some actionable steps to safeguard your family:

1. Adjust Default Settings - Many smart toys come with factory-set usernames and passwords, which are easy for hackers to exploit. Update these immediately with strong, unique passwords to secure the device.

2. Enable Parental Controls -Take advantage of parental controls to manage how the device interacts with the internet. This can help block access to inappropriate content, disable communication features that could connect your child with strangers and prevent unauthorised spending on in-app purchases.

3. Secure Your Home Network - Enhance the security of your home Wi-Fi by using a strong password and enabling network encryption. Consider setting up a separate network for smart devices to limit exposure to your primary network.

4. Educate Your Children - Teach your kids the basics of online safety, such as not sharing personal information through smart toys. Empower them to report anything unusual or concerning while using these devices.

 

New Regulations Offer Better Protection

The EU has introduced a new ‘Cyber Resilience Act’ with the aim to enhance the security of IoT (Internet of Things) devices, including smart toys. The law will require manufacturers to strengthen encryption, issue mandatory updates, and improve default security features with compliant products (including smart toys) being awarded a CE mark, making it easier for parents to select the safest toys and products.  Manufacturers will have until 2027 to meet the regulations. While these measures are a step in the right direction - parents must remain vigilant.

A Safer Christmas for All

This December, let’s ensure the season is filled with joy, not worry. By taking simple precautions like updating settings, enabling parental controls, and staying informed about device security, you can protect your family while enjoying the wonders of technology.

Remember, the best gifts bring happiness without compromising your peace of mind. Let’s make this Christmas one to remember—for all the right reasons!

Sources
Temple University. “Not child’s play: Potential risks of smart toys explained”, Temple University, 10th November 2023: https://news.temple.edu/news/2023-11-29/not-child-s-play-potential-risks-smart-toys-explained

European Commission. “Safer Digital Future: New Cyber Rules Become Law.” European Commission, 10th December 2024. https://commission.europa.eu/news/safer-digital-future-new-cyber-rules-become-law-2024-12-10_en

O'Connell, Adrian. “Christmas Tech for Kids: Great Gift Ideas with Safety Features for Parental Peace of Mind.” The Irish Times, 21st November 2024. https://www.irishtimes.com/technology/2024/11/21/christmas-tech-for-kids-great-gift-ideas-with-safety-features-for-parental-peace-of-mind/

BBC News. “Roblox Bans Children from Messaging Others Over Safety Concerns.” BBC News, 21st November 2024. https://www.bbc.com/news/articles/c9wrqg4vd2qo

European Commission. “A Safer Digital Future: New Cyber Rules Become Law.” European Commission, 10th December 2024. https://commission.europa.eu/news/safer-digital-future-new-cyber-rules-become-law-2024-12-10_en