SocialProof Security CEO Rachel Tobac uses social engineering to hack CNN tech reporter Donie O
SocialProof Security CEO Rachel Tobac uses social engineering to hack CNN tech reporter Donie O'Sullivan's accounts.
PHOTO: Graphics: John General/CNN
Now playing
04:35
Watch how a social engineering hack works
Passengers look out at American Airlines flight 718, a Boeing 737 Max, parked at its gate at Miami International Airport as people load for the flight to New York on December 29, 2020 in Miami, Florida. The Boeing 737 Max flew its first commercial flight since the aircraft was allowed to return to service nearly two years after being grounded worldwide following a pair of separate crashes. (Photo by Joe Raedle/Getty Images)
Passengers look out at American Airlines flight 718, a Boeing 737 Max, parked at its gate at Miami International Airport as people load for the flight to New York on December 29, 2020 in Miami, Florida. The Boeing 737 Max flew its first commercial flight since the aircraft was allowed to return to service nearly two years after being grounded worldwide following a pair of separate crashes. (Photo by Joe Raedle/Getty Images)
PHOTO: Joe Raedle/Getty Images
Now playing
03:15
Airlines & TSA boost security ahead of Inauguration
Philanthropist Chief Executive Officer of Las Vegas Sands Sheldon Adelson listens to US President Donald Trump address to the Israeli American Council National Summit 2019 at the Diplomat Beach Resort in Hollywood, Florida on December 7, 2019. (Photo by MANDEL NGAN / AFP) (Photo by MANDEL NGAN/AFP via Getty Images)
Philanthropist Chief Executive Officer of Las Vegas Sands Sheldon Adelson listens to US President Donald Trump address to the Israeli American Council National Summit 2019 at the Diplomat Beach Resort in Hollywood, Florida on December 7, 2019. (Photo by MANDEL NGAN / AFP) (Photo by MANDEL NGAN/AFP via Getty Images)
PHOTO: Mandel Ngan/AFP/Getty Images
Now playing
03:14
Major GOP donor and casino magnate Sheldon Adelson dies
Democratic presidential candidate and former US Vice President Joe Biden speaks on the state of the US economy on September 4, 2020, in Wilmington, Delaware. (Photo by JIM WATSON / AFP) (Photo by JIM WATSON/AFP via Getty Images)
Democratic presidential candidate and former US Vice President Joe Biden speaks on the state of the US economy on September 4, 2020, in Wilmington, Delaware. (Photo by JIM WATSON / AFP) (Photo by JIM WATSON/AFP via Getty Images)
PHOTO: JIM WATSON/AFP/Getty Images
Now playing
02:02
Why Wall Street is hopeful about Biden despite economic challenges
Now playing
05:39
Ben & Jerry's calls for Trump's removal
Panasonic
Panasonic's Augmented Reality Heads-up Display
PHOTO: Panasonic USA
Now playing
01:06
This tech gives drivers directions on the road in front of them
PHOTO: Wimkin
Now playing
03:18
The online warning signs of the violent Capitol siege
PHOTO: Twitter
Now playing
02:39
Twitter permanently suspends Donald Trump from platform
PHOTO: CNN
Now playing
03:56
'What are we supposed to do?': Rioter speaks to CNN reporter
President Donald Trump arrives to speak at a rally protesting the electoral college certification of Joe Biden as President, Wednesday, Jan. 6, 2021, in Washington. (AP Photo/Evan Vucci)
President Donald Trump arrives to speak at a rally protesting the electoral college certification of Joe Biden as President, Wednesday, Jan. 6, 2021, in Washington. (AP Photo/Evan Vucci)
PHOTO: Evan Vucci/AP
Now playing
01:38
Facebook blocks Trump through end of presidency
PHOTO: CNN
Now playing
02:56
CNN speaks to Trump supporters about Trump's election lies
NEW YORK, NY - JUNE 3: The Google logo adorns the outside of their NYC office Google Building 8510 at 85 10th Ave on June 3, 2019 in New York City. Shares of Google parent company Alphabet were down over six percent on Monday, following news reports that the U.S. Department of Justice is preparing to launch an anti-trust investigation aimed at Google. (Photo by Drew Angerer/Getty Images)
NEW YORK, NY - JUNE 3: The Google logo adorns the outside of their NYC office Google Building 8510 at 85 10th Ave on June 3, 2019 in New York City. Shares of Google parent company Alphabet were down over six percent on Monday, following news reports that the U.S. Department of Justice is preparing to launch an anti-trust investigation aimed at Google. (Photo by Drew Angerer/Getty Images)
PHOTO: Drew Angerer/Getty Images North America/Getty Images
Now playing
03:25
Google employee on unionizing: Google can't fire us all
FILE - In this undated file photo issued by the University of Oxford, a researcher in a laboratory at the Jenner Institute in Oxford, England, works on the coronavirus vaccine developed by AstraZeneca and Oxford University. Britain on Wednesday, Dec. 30, authorized use of a second COVID-19 vaccine, becoming the first country to greenlight an easy-to-handle shot that its developers hope will become the "vaccine for the world." The Department of Health said it had accepted a recommendation from the Medicines and Healthcare Products Regulatory Agency to authorize the vaccine developed by Oxford University and U.K.-based drugmaker AstraZeneca.  (John Cairns/University of Oxford via AP, File)
FILE - In this undated file photo issued by the University of Oxford, a researcher in a laboratory at the Jenner Institute in Oxford, England, works on the coronavirus vaccine developed by AstraZeneca and Oxford University. Britain on Wednesday, Dec. 30, authorized use of a second COVID-19 vaccine, becoming the first country to greenlight an easy-to-handle shot that its developers hope will become the "vaccine for the world." The Department of Health said it had accepted a recommendation from the Medicines and Healthcare Products Regulatory Agency to authorize the vaccine developed by Oxford University and U.K.-based drugmaker AstraZeneca. (John Cairns/University of Oxford via AP, File)
PHOTO: John Cairns/University of Oxford/AP
Now playing
02:36
AstraZeneca vaccine provides 'logistical convenience'
President Donald Trump
President Donald Trump's name appears on a stimulus check on May 3, 2020.
PHOTO: Will Lanzoni/CNN
Now playing
03:05
Here's what the new stimulus package means for Americans
PHOTO: Branislav Nenin/Shutterstock
Now playing
02:27
Is working from home the new normal?
(CNN Business) —  

Wyze Labs, which makes smart cameras and connected home gadgets, has confirmed databases holding millions of customers’ information were exposed to the public.

The first data leak exposed customer email addresses, as well as the email addresses of those people who were given permission to view the camera feeds. A list of cameras in customers’ home and tokens used to connect to smartphones and personal assistants such as Alexa were also left open for public view. That database was left exposed from December 4 until December 26.

The breach was disclosed on December 26 by Twelve Security and quickly confirmed by Wyze. Twelve Security said the data breach involved 2.4 million customers worldwide. Wyze said no customer passwords or financial information was contained in the database that was left unprotected.

Wyze on Monday said a second database had also been exposed. It did not give details of what information is on that database, although it said it also did not include passwords or financial information.

As part of the response to the original data leak, Wyze logged out their customers and required them to log in again to create new tokens.

Wyze, which was started by three former Amazon employees, makes cameras that cost as little as $20, much less than the hundreds of dollars that many competing products cost. The price is one of the reasons CNN Business listed it as one of the top tech gifts of 2019.

But as smart home devices, such as cameras, become more common, a growing number of hackers have sought to access them. Earlier this month, four families with Ring cameras reported that hackers had accessed their system and talked to them. One told an 8-year old girl that he was Santa Claus, and urged her to destroy the room.

Ring, which is owned by Amazon (AMZN), said the system invasion was not the result of a breach or failure of Ring’s security. Instead, it said the hackers had likely gained access to the family’s account through weak or stolen login credentials.