Researcher Gains Access to 1.1 Million Baby Monitors Through Single Leaked API Key

A researcher extracted one API key—a digital credential—from Meari Technology's Android app, exposing 1.1 million baby monitors and security cameras sold under brands including Wyze, Petcube, and Zhiyun across 118 countries. The Chinese manufacturer's weak password practices on its backend platform enabled the breach. Meari closed the vulnerability on March 10, 2026.