Some owners of Wyze security cameras have unexpectedly been able to see webcam feeds that do not belong to them – they have inadvertently looked into other people’s homes. A Wyze spokesperson said this was due to a caching error.
Reddit users shared the problem:
“I went to check my cameras and they were gone, they had been replaced with new ones… and they weren’t mine! Sorry if this is your house and the dog… I don’t want to see them as much as you don’t want to!”
“I can click the events tab and see all the events on this random person’s camera inside his house.”
“I don’t know why, but I see someone else’s camera.”
Each of these threads contains comments from other users reporting similar incidents. Sometimes people even saw the same cameras as other commentators. Eyewitnesses note that they viewed other channels through the Wyze view on the company’s website.
Wyze employees informed users that the page was under maintenance and that the company was working on an issue. Wyze spokesman Dave Crosby has released an official statement:
“It was a caching issue and it has now been resolved. For approximately 30 minutes this afternoon, a small number of users who used a web browser to log in to their camera on view.wyze.com could see the cameras of other users who also logged into view.wyze.com that day. The issue did not affect the Wyze program or users who were not logged into view.wyze.com during this time.
When we discovered this, we closed view.wyze.com for about an hour to investigate and resolve the issue.
This experience does not reflect our commitment to users or the investments we have made over the past few years to improve security. We are continuing to investigate this issue and will make sure that this does not happen again. We are also working to locate affected users.”
Crosby added that the company’s data suggests that others could see the channels of about 10 users.
This is not the first incident with the company’s cameras. In March 2022, it turned out that Wyze had been aware of a security vulnerability for three years that could allow attackers to gain access to WyzeCam v1 cameras, but silently shut down the camera without informing customers about the vulnerability.
Source: The Verge