Researchers have warned, with even a factory reset possibly not being enough to remove all traces of user data from old Amazon Echo devices.
A team from Northeastern University bought and examined 86 used Amazon Echo Dot products over 16 months, and found that physically dismantling them to access the flash memory allowed the researchers to access previous users’ information even on those which had been reset.
What kind of data can be retrieved?
“An adversary with physical access to such devices for example, purchasing a used one can retrieve sensitive information such as Wi-Fi credentials, the physical location of previous owners, and cyber-physical devices such as, cameras, door locks.