This could be seriously bad for Amazon. If this story gains traction (I have a feeling it will), this could be a disaster that is billions of dollars in size.
Gary Horcher from KIRO7.com wrote:
If this is true, it's a total and complete breach of trust with Amazon. We've been told over and over that the Alexa only records when it hears the trigger word and waits for a command. While it is doing that, it has a light ring on the device that lights up to alert the user that it's recording.
If it was able to record without the light being on, and sent that recording without the user's permission to someone in their phone contacts. Well, this could put Amazon in a world of trouble.
The most annoying part of this article is the fact that there are so few details. HOW was the information sent? Via text, via email? It seems like an awfully strange path for a bug to take.
I have a (unfortunate) sneaking suspicion that this may be something malicious that was added by someone in the staff at Amazon, and that was accidentally triggered somehow
(a certain phrase or frequency of sound perhaps?).
Amazon for their part issued an apology for the incident stating:
Pretty weak considering the magnitude of this issue. I have an Amazon Echo in my home. I'm considering unplugging it for good after this. I suggest you consider the same.