Security camera vendor Verkada has been fined millions of dollars for spamming customers and leaving their data exposed.

According to the FCC, the cybersecurity practices at Verkada so bad that it took weeks to react to suspicious behavior flagged on their own AWS account. Some customer cameras were also involved in DDoS attacks after being infected by the Mirai botnet.