Wyze, based in Seattle, was founded by former Amazon employees. The company produces inexpensive smart cameras, light bulbs, plugs and security devices.

Compromised data includes usernames, email addresses, Alexa tokens, and information specific to people's wireless home networks.

Also exposed (albeit for just 140 users) were health stats - including weight, height and gender for the company's upcoming smart scale product.

"We are confirming that some Wyze user data was not properly secured and left exposed from December 4th to December 26th," wrote Wyze co-founder and chief product officer Dongsheng Song in a December 27 forum post.

"We copied some data from our main production servers and put it into a more flexible database that is easier to query. This new data table was protected when it was originally created," he added. "'However, a mistake was made by a Wyze employee on December 4th when they were using this database and the previous security protocols for this data were removed."