Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsThe incidents were real, but the viral claim is too broad. In May 2024, owners in Minnesota, Los Angeles and El Paso reported that Ecovacs Deebot X2 robot vacuums were remotely controlled and made to emit racist abuse. Researchers and ABC News also demonstrated that certain Ecovacs devices could expose camera, microphone and remote-control functions. The evidence does not show that robot vacuums across the United States—or every Ecovacs model—were hacked.
What happened?
The reported incidents involved robots moving without their owners’ permission, a stranger’s voice coming through the built-in speaker and, in one account, a vacuum chasing a dog. One Minnesota owner also reported that an unknown person accessed the robot’s camera and control functions before the device was unplugged.
The abusive speech was the most attention-grabbing part of the story. The more serious security issue was the apparent ability to access a camera, microphone and mobile device inside a private home.
ABC News published the reports on October 11, 2024, but the attacks themselves were reported in May. The coverage concerned Ecovacs Deebot X2-series devices, not robot vacuums as a generic category.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall#1 Best Overall
- 【Compatible Models】 These Replacement Accessories Kit are compatible with ECOVACS DEEBOT X2 Omni / X2 / X2 Pro Robot Vacuum Cleaner
- 【Main Brush & Side Brush】Main brush is made of high -quality rubber, which can remove dust and stains on the floor. The side brush is made of high -intensity bristles, which can clean the dust in the corner
- 【Reusable Mop Pad 】The pads fit the edge, the water absorption is strong and the water is more uniform. The blue part of the mop pad is hard fiber, which can remove stubborn stains and the mop is very stain-resistant
- 【Washable Filter】The HEPA filter is made of washable ABS material, which can efficiently filter dust, particles, and pet hair
- 【Valuable package】Replacement Accessories kit Include 1 x Rolling brush,4 x Side Brushes, 4 x Hepa Filter,4 x Mop pads and 4 x Dust bags 1 x Brush. Any problem, contact us anytime
ABC News reported the owner accounts and Ecovacs’ response.
Verified timeline
- May 24, 2024: A Minnesota owner, Daniel Swenson, reported abnormal robot behavior, camera access and repeated racist abuse.
- May 24, 2024: A Los Angeles owner reported a Deebot being remotely driven around the home and chasing a dog while abusive speech came from its speaker.
- May 29, 2024: An El Paso owner reportedly experienced similar racist abuse until the robot was unplugged.
- August 2024: Security findings involving Ecovacs products were presented publicly at DEF CON, according to coverage of the research.
- October 4, 2024: ABC News published a technical demonstration involving remote access to a Deebot’s camera and audio capabilities.
- October 11, 2024: ABC News published its report on the U.S. owners whose robots were hijacked.
Which robot vacuums were involved?
The U.S. cases named the Ecovacs Deebot X2. That does not establish that every X2 unit, every Deebot model or every Ecovacs product was compromised. The research also examined other Ecovacs home robots, including additional Deebot models and lawn-mowing robots, but applicability varies by model, firmware and region.
It is also inaccurate to describe the evidence as a nationwide attack on all robot vacuums. The number of affected devices was not established, and the reports do not prove that the incidents were coordinated.
Rank #2
- 【Compatible model】: These accessories are fit for Ecovacs Deebot X2 Omni / X2 / X2 Pro / DEX86 Robot Vacuums. Our replacement accessories are well compatible with your vacuum robot, You can easily install and use them. Please confirm your Robot Vacuum model before purchasing.
- 【Mop cloths】: Mop Cloths made of high quality materials, durable and practical. The soft texture can protect the floor from scratches and leaves no water stains when cleaning dirt.
- 【Replace regularly】: Extend the lifespan of the vacuum cleaner and work like the original vacuum cleaner. To ensure cleaning efficiency, we recommend that you replace the accessories kit regularly, which depending on the frequency of use.
- 【Premium Materials】These accessories kits are made of high-quality materials. Rubber brush remove stains while protecting floors. The larger dust bag fits snugly, preventing leaks. Highly absorbent mop pads make it easy to clean up water stains. Side brush penetrates corners and edges to remove more stains and dust. The filter removes 99.97% of particles as small as 0.3 microns
- 【Package included】: You can get 1 main brush, 6 side brushes, 4 filter, 6 mop pads, 6 dust bag, 1 brush in your package, which will cover your daily life. If you have any questions, please feel free to contact us, we will try our best to solve the problems for you.
What could an attacker do?
Reported and demonstrated capabilities included:
- Driving the robot remotely.
- Accessing or viewing the onboard camera.
- Listening through or speaking through onboard audio hardware.
- Playing arbitrary speech through the speaker.
- Disabling or bypassing aspects of the camera-use warning behavior.
The demonstrations show that unauthorized monitoring was technically possible. They do not prove that every victim was recorded, that footage was stored, or that every attacker viewed private images or audio.
How was access possible?
The reporting describes several weaknesses and possible access routes—not one confirmed exploit that explains every incident.
Bluetooth exposure
Researchers reportedly found that certain Ecovacs devices could be accessed over Bluetooth from roughly 140 metres, or about 460 feet, under suitable conditions. That kind of weakness could allow extensive device control without the attacker first obtaining the owner’s cloud password.
Rank #3
- 𝟯𝟬,𝟬𝟬𝟬𝗣𝗮 𝗕𝗟𝗔𝗦𝗧 𝗦𝗨𝗖𝗧𝗜𝗢𝗡 — 𝗖𝗟𝗘𝗔𝗡 𝗠𝗢𝗥𝗘 𝗜𝗡 𝗢𝗡𝗘 𝗣𝗔𝗦𝗦: Weak suction leaves dirt behind. BLAST 30,000Pa high-airflow suction lifts dust, pet hair, and crumbs from carpets and hard floors in one go—cleaning faster with fewer repeat passes.
- 𝗥𝗘𝗔𝗟 𝗦𝗖𝗥𝗨𝗕𝗕𝗜𝗡𝗚 𝗪𝗜𝗧𝗛 𝗢𝗭𝗠𝗢 𝗥𝗢𝗟𝗟𝗘𝗥 𝟯.𝟬 — 𝗡𝗢𝗧 𝗣𝗔𝗗 𝗦𝗠𝗘𝗔𝗥𝗜𝗡𝗚: Pads wipe, they don’t scrub. OZMO ROLLER 3.0 uses a 10.6-inch self-washing roller with continuous, pressurized scrubbing to lift sticky spills, dried stains, and kitchen grime—removing mess instead of spreading it.
- 𝗜𝗡𝗦𝗧𝗔𝗡𝗧 𝗦𝗘𝗟𝗙-𝗖𝗟𝗘𝗔𝗡𝗜𝗡𝗚 𝗢𝗭𝗠𝗢 𝗥𝗢𝗟𝗟𝗘𝗥 𝗠𝗢𝗣, 𝗔𝗟𝗪𝗔𝗬𝗦 𝗠𝗢𝗣 𝗪𝗜𝗧𝗛 𝗖𝗟𝗘𝗔𝗡 𝗪𝗔𝗧𝗘𝗥: Dirty pads re-soil floors. Pressurized self-washing with fresh-flow rinsing cleans the roller in real time, so it always mops with clean water—preventing streaks, residue, and secondary contamination from start to finish.
- 𝗧𝗥𝗨𝗘𝗗𝗚𝗘 𝟯.𝟬 — 𝗖𝗟𝗘𝗔𝗡 𝗧𝗛𝗘 𝗟𝗔𝗦𝗧 𝗜𝗡𝗖𝗛: Edges are often missed. TruEdge 3.0 extends the roller 0.6 inches beyond the body, gliding along baseboards and corners to remove dust lines where side brushes can’t scrub.
- 𝗭𝗘𝗥𝗢𝗧𝗔𝗡𝗚𝗟𝗘 𝟰.𝟬 — 𝗕𝗨𝗜𝗟𝗧 𝗙𝗢𝗥 𝗛𝗔𝗜𝗥 & 𝗣𝗘𝗧𝗦: Tired of hair tangles? BLAST airflow guides hair directly into suction, while ZeroTangle 4.0 helps prevent wrapping—less maintenance, more consistent cleaning power.
Weak protection around video and remote control
Coverage described problems with the app’s four-digit PIN protection for video and remote-control functions. Researchers also reported that the camera-use warning could be disabled remotely. These issues increase the consequences of a compromise because they can turn a cleaning device into a mobile surveillance platform.
Possible credential stuffing
Ecovacs told at least one affected owner that the account credentials had been acquired by an unauthorized person and suggested that credential stuffing may have been involved. Credential stuffing occurs when attackers try usernames and passwords stolen from another service, relying on people reusing passwords.
That was Ecovacs’ explanation for an individual account compromise, not proof that it caused every reported incident. ABC News also reported that the Bluetooth weakness was unlikely to explain the geographically distributed attacks by itself.
Rank #4
What Ecovacs said
In its response to the Minnesota owner, Ecovacs reportedly said that the account and password had been acquired by an unauthorized person, that it had identified and disabled the attacker’s IP address, and that credential stuffing was a strong possibility. The company also indicated that a security upgrade for the X2 series was expected in November 2024.
A promised or released update should not be treated as proof that every issue was fixed on every regional variant. Owners should verify the current firmware and security status for their exact model and serial number through Ecovacs.
Security concerns also continued beyond the 2024 X2 reports. In a May 9, 2025 security advisory, Ecovacs described an issue in which some DEEBOT base stations released an insecure Wi-Fi network. That is separate from the reported 2024 attacks and should not be presented as their confirmed cause.
Recommended Free Tools
Best Value
- Compatible with: The x2 main brush cover replacement is compatible with ECOVACS DEEBOT X2 Omni / X2 / X2 Pro Robot Vacuum Cleaner.
- Premium Quality: Our main brush cover is made of high-quality material, durable and wear-resistant, with long service-life.
- Easy to install: Easy to replace and install, no extra tools need, more stable performance and effortless cleaning, so you can easily clean it every day.
- Delicate and exquisite, highly matching the equipment. Just replace the main roller brush cover, which Help your vacuum cleaner keep in the best working condition.
- Package includes: 1 piece Main roller brush cover replacement.
What owners should do now
- Unplug the robot if it moves, speaks or behaves unusually. Do not reconnect it simply to test whether someone still has access.
- Change the Ecovacs account password. Use a unique password that has never been used elsewhere.
- Secure the associated email account if its password was reused or may have been exposed. An attacker with email access may be able to reset the vacuum account.
- Enable multifactor authentication if the current Ecovacs app or account supports it.
- Update the Ecovacs Home app and the robot’s firmware using the latest release available for the exact model and region.
- Review sessions, linked devices and household members if those controls are available in the app.
- Contact Ecovacs support and request a security review for the device, account and serial number.
- Keep camera- and microphone-equipped devices disconnected until their firmware and account security have been confirmed.
- Use a separate IoT or guest network where practical. Network isolation can limit damage to other devices, but it cannot remove a cloud-account or Bluetooth vulnerability.
For privacy information and available controls, consult Ecovacs’ privacy guidance. Exact app labels and firmware numbers vary, so owners should not rely on a universal menu path.
If changing the password does not solve the problem
A password reset may not address a device-level Bluetooth flaw or an already-compromised robot. If unauthorized movement or audio continues:
- Keep the robot unplugged.
- Remove or revoke it from the account if the app allows this without reconnecting the device.
- Document dates, notifications, screenshots and any unusual behavior. Record video if it can be done safely.
- Ask Ecovacs whether the exact serial number and firmware are affected.
- Delay a factory reset until evidence has been preserved, because a reset may erase useful logs or settings.
- Report suspected criminal unauthorized access to local law enforcement or an appropriate cybercrime reporting channel.
Should you replace the vacuum?
Replacement is reasonable if the manufacturer cannot clearly identify the device’s firmware status, provide a security remedy or explain how to secure the account. It is not necessary to conclude that every Ecovacs device is unsafe—or that another brand is automatically safe—based only on these reports.
When evaluating a replacement, look for:
- A published vulnerability-disclosure process.
- Clearly documented firmware-update support.
- Multifactor authentication and account-session management.
- Controls to disable cameras and microphones.
- Local-only control or a useful offline operating mode.
- Transparent privacy and data-retention policies.
- Basic cleaning functionality that does not depend entirely on continuous cloud access.
Camera navigation may improve obstacle avoidance and mapping, but it creates a more serious privacy consequence if compromised. Cloud access is convenient for remote operation, but it expands the attack surface. A guest network can reduce lateral movement, but router isolation settings differ and do not fix flaws in the vacuum itself.
Free tools Windows power users keep installed
One-click scans. No signup required.
What remains unknown
The public reporting does not establish the total number of compromised devices, whether the incidents were coordinated, who carried them out, or whether all affected devices were accessed through the same route. It also does not establish whether recordings were retained or distributed, or whether every regional Deebot X2 variant received the same remediation.
The accurate conclusion is therefore narrower than the viral headline: real owners reported real takeovers involving Ecovacs Deebot X2 devices, and researchers demonstrated serious privacy and control weaknesses. That is a meaningful warning for connected-home owners, but it is not evidence that robot vacuums across the United States were universally hacked.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
