A new website based in Russia is streaming video live from thousands of private webcams around the world, including images of babies and hospital patients.
Hackers accessed the cameras by using default passwords set by the manufacturers, British officials said on Thursday. Those log-in details are freely available online, leaving the unsecured cameras accessible to anyone.
A quick browse through the website reveals live streams from nearly 4,600 cameras in the U.S., including live video of a baby sleeping in a cot in New Jersey.
Several webcams in Greensboro and High Point are also streaming live on the website, including a camera inside a bedroom.
More than 2,000 cameras have been hacked in France, about 1,500 in the Netherlands, and thousands more in over 100 countries worldwide.
The website claims its motive is to draw attention to the problem
“These cameras are not hacked. Owners of these cameras use default password by unknown reason,” the website says.
Still, many of the cameras appear to be aimed at improving personal security. But public access to these devices — including CCTV networks in shops and baby monitors — is exposing intimate moments.
There’s video of a couple having breakfast in France, CCTV footage of an elderly patient lying in a bed in Minnesota, scenes from a beauty salon in Japan, and the view of a playground with a pool and trampoline in the Netherlands.
Each link comes with what the website claims is the camera’s GPS coordinates, postcode, time zone, and a map showing its precise location.
The security concerns are huge.
“Few people would leave their front doors unlocked, yet failing to password protect your devices carries the same risks to both their privacy and security,” said Emma Carr, director of the Big Brother Watch privacy pressure group.
The U.K. Information Commissioner’s Office urged people to change the default passwords to prevent their cameras from being hacked.
Over 14,000 of those devices are made by China’s Foscam. The manufacturer was not available to comment.
Panasonic and Linksys cameras were also affected.