February 19, 2024 at 12:20PM
Wyze addressed a security incident affecting thousands of users, attributing it to a third-party caching client library that struggled to handle a surge in camera activity after an outage. This led to users seeing others’ video feeds. Wyze has taken steps to enhance security and prevent reoccurrence, but hasn’t disclosed the exact number impacted.
After reviewing the meeting notes, the key takeaways are:
– Wyze experienced a security incident where approximately 13,000 customers had access to other users’ video feeds due to a third-party caching client library’s problems with a high volume of camera activity after an outage.
– The incident stemmed from a widespread outage with their partner AWS, leading to the incorrect connection of device IDs and user ID mappings, allowing customers to view other users’ video feed thumbnails and, in some cases, actual video footage.
– Wyze has identified and communicated with affected users, apologized for the confusion and inconvenience, and has implemented additional verification for accessing video content through the Events tab to prevent future incidents. They have also made adjustments to their systems to avoid similar caching issues during periods of high demand.
Let me know if you need any further clarification or information!