Ring, a subsidiary of Amazon, faced a significant issue on May 28th when customers reported unauthorized devices logged into their accounts from various locations worldwide. While Ring attributed this to a backend update bug, customers remained skeptical, citing unknown devices and strange IP addresses. The company's explanation was met with disbelief, as users saw logins from countries they had never visited and devices they did not recognize. Additionally, some users reported live view activity during times when no one accessed the app and missed security alerts or multi-factor authentication prompts. Ring's lack of clarity and the persistence of the issue have raised concerns among customers about potential security breaches.

A security flaw in Ring’s Neighbors app exposed the precise locations and home addresses of users who had posted to the app. It included the videos taken by Ring doorbells and security cameras and the bug made it possible to retrieve the location data of users who posted to the app. The bug retrieved the hidden data, including the user’s latitude and longitude and their home address, from Ring’s servers. The hackers also created tools to break into Ring accounts and over 1,500 user account passwords were found on the dark web.

Amazon-owned home security camera company Ring fired employees for improperly accessing Ring users' video data. This data can be particularly sensitive though, as customers often put the cameras inside their home. Ring employees in Ukraine were given unrestricted access to videos from Ring cameras around the world.

3,672 Ring camera owners' login information, including login emails, passwords, time zones, and the names people give to certain Ring cameras, was stolen. This enables a potential assailant to observe cameras in someone's home, which is a grave potential breach of privacy. A hacker might access a Ring customer's home address, phone number, and payment information, including the type of card they have, its last four numbers, and security code, using the login email and password. The nature of the leaked data, which contains a username, password, camera name, and time zone in a standardized format, shows that it was acquired from a company database.