{"id":31693,"date":"2013-12-02T13:41:51","date_gmt":"2013-12-02T21:41:51","guid":{"rendered":"http:\/\/blogs.mcafee.com\/?p=31693"},"modified":"2025-08-08T02:23:51","modified_gmt":"2025-08-08T09:23:51","slug":"lg-smart-tvs-leak-data","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/lg-smart-tvs-leak-data\/","title":{"rendered":"LG Smart TVs Leak Data Without Permission"},"content":{"rendered":"

Deals abound on gadgets and gizmos in the wintry weeks before Christmas, but could that shiny new toy on your loved one\u2019s wish list put the whole family\u2019s security at risk? Smart TVs will undoubtedly be one of the more hot ticket items this season, but a recently discovered security vulnerability in the LG Smart TV reminds us that when it comes to new tech gadgets, \u201csmart\u201d doesn\u2019t always equate to \u201cmore secure.\u201d<\/p>\n

Last month, security blogger DoctorBeet discovered that his LG Smart TV was sending private data back to LG, even when a menu option titled \u201cCollection of watching info\u201d was set to \u201coff.\u201d Specifically, data showing when a channel was changed, to what channel it was changed, and the file names of documents stored on USB drives connected to the TV were being collected and passed along to LG.<\/p>\n

In answer to the findings, LG released a statement on November 21st<\/a> acknowledging that their Smart TVs were transmitting the viewing information of their customers such as channels, TV platforms, and broadcast sources. This data is used to \u201cdeliver more relevant advertisements and to offer recommendations to viewers based on what other LG Smart TV owners are watching.\u201d The fact that this data was being transmitted after a user had explicitly opted out was labeled by LG as a \u201cproblem,\u201d and they\u2019ve said they are working on an update to solve it.<\/p>\n

That explains the TV usage data, but why is LG recording the names of private files stored on USB drives plugged into their smart TVs? LG once again confirmed that DoctorBeet\u2019s findings were correct, and said that this data was being collected for a feature that was never actually implemented. The soon-to-come update will fix this issue as well.<\/p>\n

Despite their initial security oversights, LG has been quick to respond<\/a> to concerns and make changes necessary to protect their users\u2019 privacy. The unfortunate reality is that the practice of collecting data for advertising purposes is a fairly common one, and smart TVs aren\u2019t the only household tech gadgets that may be putting your security at risk.<\/p>\n

Increasingly \u201csmart\u201d video game consoles are also guilty of over sharing. Microsoft recently released an Xbox One privacy statement<\/a> confirming that data is collected from the chat, video, and communications features of live-hosted gameplay sessions. In it\u2019s PlayStation 4 software usage terms, Sony acknowledges that they reserve the right to \u201cmonitor and record any and all PlayStation activity.\u201d<\/a> Nintendo addresses the issue of data collection on the Wii in their end user license agreement, stating that all data collection will be done for \u201clegitimate business purposes.\u201d<\/a> All of this data collection is within legal limits, but it does beg the question\u2014how far does our privacy really extend when so many of our devices are connected to the Internet?<\/p>\n

It\u2019s one thing when data is being collected and transmitted back to the manufacturer for product improvements or for advertising purposes, but another when it\u2019s being captured by cybercriminals with malicious intent. I wrote previously on the vulnerability of smart TVs to hackers<\/a>, specifically how cybercriminals can install spyware and subsequently take over your device.<\/p>\n

The phenomenon of everyday objects becoming increasingly connected\u2014both to each other and outside sources\u2014is being referred to as the \u201cInternet of Things.\u201d Smart TVs and gaming consoles are just two examples of the increasing Internet connectivity of things, and this trend will only continue to grow. This year, we\u2019ve seen Internet connected cars<\/a>, home appliances, medical devices, glasses, watches, and more. Where there is a will, there is a way, and as our devices become more connected, cybercriminals will look to find ways to exploit their security gaps. So, what\u2019s a user to do when personal data is being leaked through so many devices?<\/p>\n

Tips to help patch the holes:<\/h2>\n