Lovense ignored app vulnerabilities for eight years | Kaspersky official blog
Source Kaspersky Security Blog
Rated by Threat Radar
Data as of 7 Oct 2025, 11:55 UTC
What to do
AI-suggested
Users should immediately update their Lovense apps once security patches are released by the vendor. Until patches are available, users should minimize app usage and avoid linking accounts with sensitive personal information. Organizations should monitor for suspicious activities related to Lovense accounts and educate users about phishing risks stemming from exposed emails. Implementing multi-factor authentication (MFA) where possible can reduce the risk of account takeovers. Security teams should conduct audits of connected IoT devices and enforce strict access controls. Vendors and developers must prioritize secure coding practices, regular vulnerability assessments, and timely patch management for intimate and IoT devices. European regulators and industry groups should consider guidelines and certification for privacy and security standards in this sector. Finally, users should be encouraged to review app permissions and revoke unnecessary access to personal data.
Description
For years, Lovense failed to fix vulnerabilities in its intimate-toy apps that exposed user emails and enabled account takeovers.