Hive Box Facial-Recognition Locks Hacked by Fourth Graders Using Intended Recipient’s Facial Photo

Facial-recognition locks by Hive Box, an express delivery locker company in China, were easily opened by a group of fourth-graders in a science-club demo using only a printed photo of the intended recipient’s face, leaving contents vulnerable to theft.

Risk classification

• Primary risk domain: 2 Privacy & Security
• Primary risk subdomain: 2.2 AI system security vulnerabilities and attacks

The incident involves a security vulnerability in the facial-recognition lock system that allowed unauthorized access to physical lockers using printed photos.

Additional risk subdomains

• 7.3 Lack of capability or robustness: The 2D facial recognition system lacked the robustness to distinguish between a real human face and a printed photograph.

Causal factors

• Entity: AI
• Intent: Unintentional
• Timing: Post-deployment

The security vulnerability was caused by the deployed AI facial-recognition system failing to distinguish a 2D photo from a live face, which was an unexpected outcome of its deployment.

EU AI Act risk tier

• Risk tier: 2 High Risk

High Risk: The system uses biometric identification (facial recognition) to control access to physical lockers, which carries significant security and privacy implications.

AI system and alleged parties

• AI system: Hive Box facial-recognition locks (Hive Box)
• AI purpose: Face Recognition; Identification
• Behaviour type: Tool
• Alleged developer: Hive Box
• Alleged deployer: Hive Box
• Alleged harmed parties: Hive Box customers

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1

Potential causes

Management

• Prioritizing Market Growth over Safety: Company focused on rapid expansion and IPO preparation over system security.
• Premature Feature Release: Management approved rolling out beta facial recognition to the public.

Technology

• Vulnerable 2D Mapping: Locker locks used simple 2D mapping instead of secure 3D mapping.
• Lack of Liveness Detection: The camera could not distinguish between a live human face and a flat photo.
• No Infrared Illumination: Absence of infrared sensors allowed static printed images to bypass security.

Data Inputs

• Static Image Input Vulnerability: The system accepted a printed photo as a valid facial data input.

Human Factors

• User Trust in Beta Tech: Users trusted the locker system despite it being in an unverified beta phase.

Process and Methods

• Public Beta Deployment: Deploying untested beta features directly to active public smart lockers.
• Inadequate Security Testing: Failure to test basic spoofing methods like printed photos before release.
• Lack of Multi-Factor Verification: System relied solely on facial recognition without secondary verification.

Regulatory Environment

• Weak Standards for Smart Locks: Lack of strict regulatory standards allowed weak 2D facial recognition locks.
• Rapid AI Commercialization Pressure: Push for AI adoption outpaced the establishment of safety regulations.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, consistent details about the vulnerability, its discovery by the students, replication by a TV host, and the company's subsequent suspension of the beta feature. Expert commentary explains the technical cause clearly.
• Ambiguities identified: None of significance.
• Alternative interpretations: None.

Primary school students bypassed Hive Box's beta 2D facial recognition locker system using printed photos. While demonstrating clear consumer privacy and biometric security vulnerabilities in a major commercial network, the incident has negligible national security implications and the feature was quickly suspended.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: China
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The feature was immediately suspended by the company, eliminating any active threat and leaving only long-term systemic security lessons.
• Autonomy: Full autonomy. The facial recognition system autonomously decides to unlock the physical locker doors without any human oversight or intervention.
• Novelty: Established threat. Using 2D printed photographs to bypass simple facial recognition systems is a well-documented and established vulnerability.

Impact by dimension

• Physical security: Negligible. The incident involved commercial smart lockers for package delivery, posing no threat to critical infrastructure, weapons, or key physical security systems.
• Information security: Negligible. No intelligence compromise, state-sponsored disinformation, or classified data theft occurred during this incident.
• Sovereignty: Negligible. The vulnerability did not impact state authority, elections, or core government decision-making processes.
• Economic security: Negligible. While affecting a major commercial delivery network, the incident did not threaten strategic industries or macroeconomic stability.
• Societal stability: Minor. The flaw raised public concerns regarding privacy and the rapid deployment of biometric technology, but did not cause widespread instability or human rights abuses.