Security Flaws in Kids’ Smartwatches Allow Hackers to Track and Spy on Users

Researchers demonstrated how vulnerabilities in a child’s smartwatch could be exploited to track, eavesdrop, and hack devices. A WIRED reporter was monitored via a GPS-enabled watch’s Wi-Fi network identifiers, allowing hackers to pinpoint their location and capture photos and audio. The device, made by CJC and manufactured by YiQingTeng Electronics in Shenzhen, exposed significant security flaws in the supply chain of GPS gadgets. Over 70 brands use similar platforms like SETracker, NewGPS2012, or SinoTrack, which lack authentication protocols, enabling unauthorized access to location data, messages, and device controls. The study reveals tens of millions of devices are vulnerable to stalking, tracking, and surveillance due to shared backend systems. Despite warnings from researchers, many companies have not patched these flaws, leaving children’s watches and car trackers at risk. The findings highlight how the diversity of brands masks a centralized vulnerability in Shenzhen-based platforms, with some systems showing signs of prior unauthorized access.