UniFi Protect is Ubiquiti Inc.'s security-camera and NVR (network video recorder) product line, sold with local hardware storage options (NVR units with multi-bay drive storage) alongside cloud-connected management. Ubiquiti's company-wide Privacy Policy (there is no Protect-specific privacy document) discloses broad 'Usage Data' collection across its whole product ecosystem -- device, performance, sensor, motion, temperature and power-usage data, device identifiers, IP address, precise location, browser data, and cookies/web-beacons/JavaScript. The policy discloses sharing of aggregate or de-identified user information with third parties 'for marketing, research, or similar purposes,' plus standard business-transfer and legal-process disclosures, with a right to request the list of third-party processors. Ubiquiti Inc. (NASDAQ: UI, formerly Ubiquiti Networks, Inc.) is a SEC-registered public company with full 10-K disclosure. That same 10-K discloses a real, material incident: in January 2021, Ubiquiti's own IT systems hosted by a third-party cloud provider were improperly accessed, source code and system credentials were compromised, and the company received an extortion threat it did not pay -- an incident that triggered a still-pending securities-fraud class action alleging the company failed to timely disclose it. This dossier was drafted from Ubiquiti's company-wide sources; no Protect-specific data-handling document was found.
TRACK RECORD
1 ENFORCEMENT ACTION
[2021-08-01]
Ubiquiti's own FY2021 10-K discloses that in January 2021 its IT systems hosted by a third-party cloud provider were improperly accessed, source code and system credentials were compromised, and the company received an unpaid extortion threat -- an incident that also triggered a pending securities-fraud class action over its disclosure.
Ubiquiti's company-wide Privacy Policy discloses that it collects broad Usage Data about devices, network and system on its Products, including device, performance, sensor, motion, temperature and power-usage data, and device identifiers.
The Privacy Policy discloses that Ubiquiti may share aggregate or de-identified user information with third parties for marketing, research, or similar purposes, beyond core service delivery.
Ubiquiti's own FY2021 10-K discloses that in January 2021 its IT systems hosted by a third-party cloud provider were improperly accessed, source code and system credentials were compromised, and the company received an unpaid extortion threat -- an incident that also triggered a pending securities-fraud class action over its disclosure.
The same Privacy Policy discloses collection of precise location, browser information, and cookies, web beacons and JavaScript that may uniquely identify a user's device or browser.