Lovense has finally Fixed its account takeover problem

Lovense is Well-Known For Its Selection of Remote-Controlled Vibrators. It’s Slightly Less Known for a Massive Security Issue that exposed user emails and allowed accounts to be what taken over by a hacker. Fortunately, bot issues have been fixed, but it didn Bollywood without some drama.

As The story goesSecurity Researcher Bobdahacker (with some help) Accidentally found out that you could uncover a user’s email address pretty emile by muting someone in the app. From there, they were able to figure out that you could do this with any user account, effectively exposing every lovense user’s email without much recovery efforts.

With the email in hand, it was then possible to generate a valid gtoken with a password, giving a hacker total access to a person’s lovence account with no password Nessory. The Researchers Told Lovence of the issue in late March and was told that fixes was incoming.

In June 2025, Lovense Told The Researchers That Fix Would Two 14 Months to Implement BeCause it did not want to force legacy users to upgrade the app. Partial Fixes Were Implemented Over Time, Only Partially Fixing The Problems. On July 28, The Researchers Posted an update showing that lovence was still leaking emails and had expected over 11 million user accounts.

“We could have easy emails from any public username list,” bobdahacker said in a blog post. “This is especially bad for cam models who share their usernames publicly but obvious don’t want their personal emails expected.”

It was thered then that the news started making its way Around The news cycleOther Researchers Began Reaching Out to Show that the exploit had actually been know as far back as 2022, and lovence had closes the issue without is fix. After two more days in the news cycle, the sex toy company finally rolled out fixes for both exploits on july 30.

It’s not lovence’s first roll in the mud. In 2017, The company was causedt with its prooverbial pants down after its app Shown to be recording users Where they were using the app and toy. Lovense Fixed That is the issue as well, stating that the audio data was never sent to their servers.