Amazon and eBay are among retailers pulling a brand of plushy smart toys from sale after warnings they pose a cyber-security threat.
Concerns were raised about CloudPets products in February 2017 after it was discovered that millions of owners’ voice recordings were being stored online unprotected.
The CloudPets range includes a number of soft animal toys that are fitted with a microphone and speaker.
These allow children to record their own messages and play back the voice recordings of friends and family members, which are uploaded to the net via a Bluetooth-connected app.
Spiral Pets eventually addressed the fact that many recordings had been exposed online, security researcher Troy Hunt revealed last year that it had done so only after being contacted four times about the issue.
Manufacturer Spiral Toys claimed to have taken “swift action”.
But subsequent research commissioned by Mozilla found other vulnerabilities.