critical
In 2019, security researchers told Wyze that anyone on the internet could access all video stored on a Wyze Cam's memory card — remotely, without a password. Wyze said nothing. For three years, millions of cameras sat in people's bedrooms, nurseries, and living rooms with a wide-open back door. Wyze only acknowledged it in 2022 when Bitdefender went public. Their fix? Discontinue the camera. Users were never told their bedroom footage may have been exposed.
critical
Wyze users opened their app and saw photos from inside strangers' homes — sleeping people, children in cribs, private moments. About 13,000 users got other people's camera thumbnails. Wyze blamed Amazon. Then in March 2024, it happened again. The same bug, the same excuse, the same strangers staring at photos of your sleeping kids. Twice in six months, Wyze accidentally proved your "private" camera feed was never really private.
critical
Three CVEs. One lets anyone bypass authentication entirely — no password needed. Another gives full remote code execution on your camera. Together, they meant any hacker could take complete control of your Wyze camera: watch live, listen, access all saved clips, and use the camera as a foothold into your home network. This sat unfixed for three years while Wyze knew about it.
critical
13,000 Wyze users saw inside strangers' homes. Baby nurseries. Living rooms. Bedrooms. A caching bug showed other people's camera feeds to random users. Wyze first said 14 people were affected. Then admitted it was 13,000. Third major security incident in two years. The company that hid a vulnerability for three years can't even count how many people it exposed.
high
Wyze says they never sell your data, but in the same document admits that what they do with your data might legally count as selling it under California law. They share your activity data with advertising companies to show you targeted ads — which is exactly what most people would consider "selling" their information.
high
Wyze uses your home security camera footage to train their AI systems. They bury this in the fine print while their marketing emphasizes security and privacy. Meanwhile, security flaws left your camera footage accessible to hackers for almost three years before being fixed.
critical
In February 2024, a Wyze system error let about 13,000 strangers see inside other people's homes through their Wyze cameras. Some people could watch live video of other families' private spaces. Major review outlets stopped recommending Wyze cameras.
high
In 2019, Wyze accidentally exposed the personal data of 2.4 million users — including email addresses and WiFi network names — and only told customers after a security researcher publicly exposed the breach. This is part of a pattern: Wyze repeatedly hides security problems until forced to admit them.
medium
Wyze knew that hackers could access your camera feed without a password for almost three years and did not fix it or tell customers. They continued selling cameras as "secure" while anyone with basic hacking skills could watch your home.
critical
Wyze says nobody can see your camera feed. Then 13,000 people saw other people's feeds. Inside their homes. Wyze first said 14 people, then quietly updated to 13,000. This happened TWICE in six months. Now imagine this company controlling who can open your front door.
high
Wyze says they protect your data. They left a database with 2.4 million people's info on the open internet for three weeks. Emails, camera names, Wi-Fi networks, body measurements. They didn't even notice — a security firm found it first.
high
Wyze says they fix security bugs in 3-4 weeks. It took THREE YEARS to fix one that let hackers access your camera's SD card. They ignored the researchers. Another researcher was so frustrated he released a full hack tool on GitHub. These are the people guarding your front door.
high
Wyze knew hackers could access their camera feeds for three years and said nothing. Bitdefender told them in 2019. They didn't fully fix it until 2022. They never told customers. If they hid a camera vulnerability for three years, what are they hiding about the thermostat that knows when you're home, when you sleep, and when you're away?
high
Your Wyze thermostat knows your schedule. The camera knows your face. The door sensor knows when you leave. The motion sensor knows which rooms you use. Together, Wyze has a complete map of your life inside your house — stored on the same cloud that hid a camera vulnerability for three years.