Concerns over smart vapes potentially spying on users
Chinese-made “smart vapes” could be used to spy on users through their mobile phones, a Labour MP warned today, reporting BritPanorama.
Graeme Downie urged ministers to investigate fears that internet-connected e-cigarettes could harvest sensitive data, track users’ movements, and expose them to cyber attacks. His comments follow warnings from US senators about sophisticated devices that may connect to smartphones to collect information.
Some newer models incorporate Bluetooth connectivity, app integration, and advanced electronics that allow interaction with other devices. Campaigners worry the technology could facilitate backdoor access for hostile actors to personal data or compromise users’ phones.
Mr. Downie, chairman of the Coalition on Secure Technology, stated: “As smart, internet-connected tech becomes more common in everyday products, we must stay alert to the risk of remote snooping and meddling by hostile actors. The vape in someone’s pocket really could be used to quietly harvest data or track their movements.”
He emphasized the magnitude of the issue, highlighting that millions of these ‘smart vapes’ are manufactured in China, where the state has extensive powers over industry. This raises concerns about where data could end up and who can access it. He stated, “The warnings coming out of the US should be a wake-up call. We need to ban this Chinese-made tech from vapes sold in the UK.”
The Coalition on Secure Technology is urging ministers and cybersecurity agencies to assess whether connected vaping devices sold in Britain pose a security risk. They are also calling for stricter scrutiny of imported devices and greater oversight of products capable of linking to smartphones.
An NCSC spokesperson commented, “While the likelihood of someone targeting vapes is low, any device that connects to the internet can carry some level of risk. Ultimately, it’s up to individuals to decide whether the added features of a ‘smart’ device make it worth connecting online, and people should be aware of the potential security implications that can come with that choice. At the same time, companies that design and sell internet-connected devices must take responsibility for building strong security into them and maintaining it over time.”
This development marks a critical juncture in addressing the intersection of consumer technology and national security, underscoring the need for adaptive regulatory frameworks that prioritize user safety while navigating the complexities of modern connectivity.