Smart Doorbells Streamed Porches to Strangers

COBOURG, Ont. — November 6, 2026 — At 2:14 on a Tuesday morning, a motion alert lit up Miriam Kessler’s phone. The camera showed her own front porch — and a man she had never met, standing in her driveway in the dark, waving at the lens. He was not outside her house. He was watching it from a kitchen in another province, through an account that was never supposed to exist.

Kessler is one of an estimated 3,100 Ontario homeowners whose fictional NorthPorch video doorbells quietly began sharing their live feeds with strangers last month. A software update to the company’s “community watch” feature reset sharing settings on thousands of devices, listing private front-door cameras on a public directory anyone could browse. The doorbells kept working exactly as their owners expected. They were simply no longer private.

The feed had not been hacked in the usual sense. No password was guessed and no account was broken into. The update changed a default, and the default did the rest. Homeowners who had bought the doorbell for the comfort of seeing who was at the door were, without knowing it, letting anyone with the directory link see the same thing — who came and went, when the house was empty, when the kids got home from school.

The doorbell was never breached. Its privacy setting was switched off by an update.

According to the fictional homeowners who spoke to ODTN News, the first sign of trouble was small and strange. A neighbour mentioned seeing a delivery on Kessler’s porch before she had. Another homeowner, Tom Okafor of Cobourg, was told by a friend in another city that his dog had been barking at the mail carrier — a detail the friend could only have known by watching Okafor’s feed. When Okafor opened his doorbell app, the sharing screen showed a toggle he had never turned on, labelled “community watch,” set to public.

“I bought a camera so I could see my own front step,” said Okafor. “I did not buy a camera so the internet could see my front step. The app never asked me. It never even told me. One morning my doorbell was mine, and the next morning it belonged to a directory.”

A front-door camera does not just record a porch. It records a routine.

IoT security advisors say doorbell cameras are attractive precisely because they are always on, always pointed at the same place, and trusted without a second thought. A porch feed is a schedule: when the house wakes up, when it empties, when the children come home, when a parcel sits waiting. That is the information a burglar used to have to gather by watching a street for days. A public directory hands it over in a list, searchable by town.

“A doorbell is the most honest sensor in a home,” said Lena Moreau, a fictional IoT security advisor who works with homeowners on connected devices. “It never lies about whether anyone is home. That is why it is valuable to its owner — and why it is valuable to anyone else who can see it. The moment a feed becomes public, the house stops being a private place and starts being a broadcast.”

In this fictional case, the feeds stayed public for eleven days before the company pulled the directory offline. NorthPorch, the fictional maker, told homeowners the sharing had been an error in the update, that no recordings were stored by the directory, and that the feeds are private again. The company has not said how many strangers viewed the feeds while they were listed, or whether any of the viewers saved what they saw.

The fictional homeowners say they have since changed how they treat every connected device in the house. Doorbell and camera apps are now checked after every update, sharing and “community” features are turned off unless they are deliberately wanted, and accounts carry unique passwords with two-factor authentication. Several households have put their doorbells on a separate home network from their computers and phones, so a camera can never be a door into anything else.

The fix, experts say, is a habit, not a purchase: check the settings after every update.

That advice applies well beyond one doorbell. Across Canada, homes now run on dozens of connected devices — cameras, locks, thermostats, speakers — and each one ships with defaults chosen by a company, not by the household. An update can change those defaults overnight, and the device will keep working perfectly while its privacy quietly changes underneath it.

For homeowners, the checklist is short: after every app or firmware update, open the privacy and sharing settings and confirm nothing has changed; turn off sharing, community, and public-directory features unless you switched them on yourself; use a unique password and two-factor authentication on every camera account; and put cameras and smart devices on a separate home network where possible. For makers, it is equally simple: never change a privacy default in an update, ask before sharing anything, and say plainly what a feature does before it is switched on.

The fictional homeowners say the directory has been taken down, and their doorbells are private again.

The porches were never broken into. They were simply put on display. And the difference — one settings screen, checked after the update — was all it took.

Watching the perimeter — and what slips past it.

ODTN News note: ODTN.News is a fictional news platform set within the Operation: Defend the North universe. All names, organizations, quotes, and events in this article are entirely fictitious. Any resemblance to real people, companies, or incidents is purely coincidental. The cybersecurity challenges it represents are very real.