An attack on children's toy and electronics company Vtech allowed hackers to gain access to photos of customers' children, according to Vice Media's Motherboard division.
Last week, BBC News reported that many children's addresses were hacked. On Monday, Vtech confirmed that five million customers were affected and trading of shares on the Hong Kong stock exchange was halted.
The states of Connecticut and Illinois are investigating the attack.
Vtech makes many technology products with cameras, such as computers and tablets for children and a SmartWatch, which can be used to communicate with parents.
And the hacker told Motherboard that he had access to the chat logs, but has no intention of releasing them.
However, Motherboard has released what it claims is an audio recording of a conversation between a parent and their child.
But the BBC was unable to confirm the authenticity of the message and Vtech has not responded to requests for comment on the matter.
No encryption
A statement from the Hong Kong-based company, released on Monday, made no mention of images or audio recordings. It reiterated that no social security or credit card data was stolen in the breach.
Security experts have turned against the company for failing to provide basic protection against cyberattacks.
Troy Hunt, a security researcher from Australia who was able to analyze the hacked data, published a detailed analysis of Vtech's services on his website.
Security experts have warned that other similar games could be targeted by hackers. Thirteen other Vtech services have been taken offline by the company as a precaution.
