← IoT Privacy Database

Wyze Cam

Wyze Labs · Camera / Doorbell

Staff Reviewed — a person at DeSpy reviewed this rating.

6.3Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesF

Records home-interior video; a 2024 AWS-related caching failure showed thumbnails and event videos from other customers' cameras to roughly 13,000 unrelated users.

Why this rating

Wyze's February 2024 caching failure exposed camera thumbnails and event video from roughly 13,000 customers' homes to unrelated strangers, a serious and well-documented security failure.

What it is

Manufacturer
Wyze Labs
Category
Camera / Doorbell
Model years
2017-present
Market status
Current
Companion app
Wyze

The evidence 4

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. S4CNN: Wyze Breach — Camera
    Breach report · CNN · 2024-02-20

    CNN's report confirming the Wyze camera caching failure that let strangers view other customers' home camera footage.

    Why it matters here: CNN confirmation of the Wyze breach.

  2. S4Engadget: Wyze Camera Security Issue Showed 13,000 Users Other Owners' Homes
    Breach report · Engadget · 2024-02-20

    Engadget's detailed account of the Wyze thumbnail-caching failure and Wyze's response, including forced logouts.

    Why it matters here: Engadget's detailed account of the Wyze caching failure.

  3. S4Wyze Camera Breach Exposed Customers' Security, Homes
    Breach report · Business Insider · 2024-02-01

    Reports on a February 2024 Wyze security failure that exposed camera thumbnails and event videos from other customers' homes to roughly 13,000 unrelated users.

    Why it matters here: Direct report on the 2024 Wyze camera caching breach exposing ~13,000 users' footage.

  4. S3NYT Wirecutter: Wyze Security Breach Review
    Breach report · NYT Wirecutter · 2024-02-01

    Wirecutter's assessment of the Wyze breach's severity and implications for its product recommendations.

    Why it matters here: Wirecutter's assessment of the breach's severity.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database