One ODM Exposes Million-Camera Surveillance Corpus

The break in the usual assumption is that this is not one product line. Meari is an ODM, so a single insecure design can fan out across many rebranded cameras and leave live feeds exposed at platform scale. The real risk is not just device compromise. It is unauthorized access to video and audio that can be collected across a distributed surveillance corpus. Reporting says more than one million Meari-made cameras in 118 countries are remotely accessible, including baby monitors, security cameras, and pet cameras. Meari says its products have been distributed to more than 100 countries, with over 35 million users. That makes the exposure global, but also reusable: a broad pool of private footage can be repurposed beyond the original owner’s intent, including for AI training. For teams that deploy these devices in offices, retail, childcare, or facilities settings, the important change is scale. A weak response from the manufacturer turns a consumer IoT issue into a persistent data-exposure problem that survives normal device hygiene and extends across many white-labeled brands.

Part of the PlainSec briefing for 2026-05-21

Sources