Your Video Doorbell May Not Be as Secure As You Think. FCC Investigating Eken for Lax Security

News security incident smart doorbell
Published:

We choose to run an ad-free site, so this post may contain affiliate links. If you wish to support us and use these links to buy something, we may earn a commission. Learn more here.

The FCC’s investigation began after reports highlighted significant privacy and security vulnerabilities in Eken’s video doorbells. These reports suggested that the devices exposed users’ home IP addresses and Wi-Fi network names, and allowed unauthorized access to photos and videos from household cameras. Such vulnerabilities raised concerns about privacy, including the risk of stalking and the safety of domestic violence survivors. Prompted by these reports, as well as calls from U.S. Senator Marco Rubio and FCC Commissioner Geoffrey Starks, the FCC’s Enforcement Bureau initiated an inquiry into the company.

The inquiry involved sending a formal Letter of Inquiry to the company’s U.S. designated agent. According to FCC rules, this agent acts as the domestic point-of-contact for any agency communications regarding FCC device certifications. Investigators found that the address provided for Eken’s designated agent, located in Colorado Springs, Colorado, was inactive since 2019. Further attempts to contact the individual who signed Eken’s documents resulted in no response. The provision of a false address on three FCC applications led to three apparent violations of FCC rules, resulting in the proposed penalties.

The Federal Communications Commission (FCC) has proposed a fine of $734,872 against the Hong Kong-based company Eken, a manufacturer of smart home devices. This action arises from Eken’s alleged failure to comply with FCC regulations requiring the designation of a U.S.-based agent. The FCC’s Enforcement Bureau is also continuing its investigation into privacy and data security concerns related to Eken and other Chinese equipment manufacturers. FCC Chairwoman Jessica Rosenworcel announced an audit of numerous certifications that share the same U.S. designated agent information as Eken.

The FCC’s investigation into Eken’s equipment continues, with the primary focus on the security vulnerabilities associated with their products. The Commission has taken several measures in recent years to address insecure equipment and ensure that device authorization bodies remain trustworthy. These measures include the implementation of the “rip and replace” program targeting equipment from Huawei and ZTE, banning equipment authorizations for certain Chinese telecommunications and video surveillance equipment, and revoking the operating authority of four Chinese state-owned carriers. Additionally, the FCC has restored broadband oversight under Net Neutrality and voted to create a voluntary cybersecurity labeling program for Internet of Things products.

The proposed action by the FCC, known as a Notice of Apparent Liability for Forfeiture (NAL), outlines the alleged violations and suggests a monetary penalty. The allegations and proposed sanctions are not final, and Eken will have the opportunity to respond with evidence and legal arguments before any final decision by the Commission. The FCC’s Chairwoman and Commissioners have approved this action, with separate statements issued by Chairwoman Rosenworcel and Commissioner Starks.

For further details about the ongoing investigation and the proposed fine, visit the FCC’s website here.

Latest News