Cheap kids smartwatch exposes the location of 5,000+ children

SMA M2Image via SMA website

A cheap $35 kids’ smartwatch made in China was caught exposing the personal details and location information for more than 5,000 children and their parents.

In a report published today by the Internet of Things testing division of AV-TEST, researchers said they found egregious security measures put in place to protect the backend and mobile app of the M2 smartwatch, made by Chinese company SMA.

“The Chinese SMA-WATCH-M2 tops the security failures of other manufacturers by far,” said Maik Morgenstern, CEO and the Technical Director of AV-TEST, whose team has been testing kids smartwatches for more than two years.

The M2 smartwatch and its security flaws

The SMA W2 kids smartwatch has been around for years. It was designed to work with a companion mobile app. Parents would register an account on the SMA service, pair their child’s smartwatch to their phone, and use the app to track the kid’s location, make voice calls, or get notifications when the child would leave a designated area.

The concept is not new, as there are plenty of similar products on the market, varying in prices from $30 to $200-$300. However, Morgenstern suggests that SMA created one of the most insecure products on the market.

Leave a Reply