A family in Oregon had a private conversation recorded and sent to a third party by their Amazon Alexa. Amazon has confirmed the incident saying the incident is very rare and under investigation.
The incident was reported when the victim, who only gave her name as Danielle, called into radio station KIRO7 and said she received a call from a friend in Seattle, telling her a recording of a conversation she had with her husband has been sent to her husband’s colleague from her contact list. They were able to play it back to her to confirm the breach was true.
She told the radio station “I felt invaded. A total privacy invasion. Immediately I said, I’m never plugging that device in again, because I can’t trust it”.
Danielle, who has Alexa devices in almost every room in her home, contacted Amazon immediately with an engineer able to confirm the incident through logs and thanking her for making them aware. The devices are now unplugged.
Amazon has not made a public statement about the incident yet but they did respond to questions from the radio station, giving a boilerplate-style response saying “Amazon takes privacy very seriously. We investigated what happened and determined this was an extremely rare occurrence. We are taking steps to avoid this from happening in the future”.
This has been one of the great concerns of such devices. Not necessarily that they record personal conversations for the specific purpose of spying. But that they malfunction and inadvertently open our lives to outside parties. Danielle was fortunate her data went to a friend who alerted her to the incident.
Given this is the first report of an incident of this type, it’s unclear whether we are dealing with a widespread bug or an isolated and, as Amazon put it, rare incident. I’ve not authorised Alexa to access my contacts but am still concerned that it may be triggering without me saying “Alexa…”and capturing audio and, at the very least sending it to Amazon without permission.
Is this the sort of incident that stops you from buying a home assistant device? Or, if you already have one, will you be turning it off?
Since we originally published this story Amazon issued the following statement:
Echo woke up due to a word in background conversation sounding like “Alexa.” Then, the subsequent conversation was heard as a “send message” request. At which point, Alexa said out loud “To whom?” At which point, the background conversation was interpreted as a name in the customer’s contact list. Alexa then asked out loud, “[contact name], right?” Alexa then interpreted background conversation as “right”. As unlikely as this string of events is, we are evaluating options to make this case even less likely.