He requested his data under a European law, but got 1,700 recordings of a stranger. Amazon says it was human error.
Under Europe's GDPR law, you can request personal data from tech companies to see what information they've gathered on you. So when an Alexa user asked Amazon for his info, he thought he'd get recordings from his Alexa device.
Instead, the man (who remains unnamed) got 1,700 recordings of a stranger, from a different Alexa gadget.
The story was picked up by German magazine c't and later confirmed by Amazon.
"This was an unfortunate case of human error and an isolated incident." Amazon told CNET. The company said it's reached out to the relevant regulatory officials "on a precautionary basis" and that it's contacted the two customers and resolved the issue with them.
Still, the accidentally shared audio files reportedly included potentially sensitive information from the stranger, including at-home conversations with a female companion.
Amazon sold tens of millions of its Alexa-equipped Echo devices in 2018, and the number of people using Alexa every day has doubled. So the voice assistant has a strong foothold in many households and may have access to a lot of personal recordings.
Amazon said, however, that it's "taken steps to further improve" its processes for dealing with data requests.
Alexa, please try to be discreet.
CNET's Holiday Gift Guide: The place to find the best tech gifts for 2018.
'Alexa, be more human': Inside Amazon's effort to make its voice assistant smarter, chattier and more like you.