A critical S3 misconfiguration allows any authenticated Lymow user to download the GPS home location, property layout, and behavioral data of every Lymow customer worldwide. No hacking required — just a valid account.
The charging station GPS is accurate to within meters. Combined with satellite view (shown on this map), anyone can identify the exact house, garden layout, and entry points.
Mowing sessions expose daily routines and presence patterns. If the mower ran today, someone is home. Long gaps suggest holidays or absence — perfect for planning a break-in.
A Lymow One costs €1,500–€2,500. This dataset is a ready-made list of affluent homeowners across Europe — people wealthy enough to own expensive autonomous garden robots.
Zone maps reveal garden boundaries, access paths, and whether a property has a back garden — information a burglar would normally need to physically scout in person.