LG Calls It Advertising. The Packets Say Otherwise.

The TV in your conference room, hotel suite, or apartment lobby just scanned every device on your network. Your phone. Your printer. Your VPN endpoint. It logged nearby Wi-Fi networks, their signal strength, and channel numbers. While the screen was dark and you thought it was off, it kept the microphone running and stored what it heard. When it got internet back, it uploaded everything.

This is not theoretical. A 135-minute investigation from Gamers Nexus, Level1Techs, and independent security researchers confirmed it last week using Wireshark, firmware decompilation, rooted test units, and system log inspection.

The forming narrative treats this as a privacy controversy: another connected device harvesting too much, a setting to disable, a patch to await. That framing is wrong, and believing it will cost you.

This Is the Business Model, Not a Bug

LG Ad Solutions reaches 49 million US smart TVs and 216 million globally, advertising access to 363 million addressable secondary devices. Marketing language to advertisers states "we know who's in the LG household" and promises campaign extension beyond the television to other screens.

That is not a policy violation. It is a product pitch. The network scanning, device fingerprinting, audio collection feed a revenue line that generated $270 million annually by late 2022 at a $1 billion valuation. LG did not build this by accident and will not remove it voluntarily.

The surveillance is the product. The TV is the distribution mechanism.

webOS repeatedly scanned local networks to identify unrelated devices: smartphones, smartwatches, connected equipment. It collected internal IP addresses, nearby Wi-Fi network information, signal strength, and geolocation data.

Standby mode was the most significant finding. In controlled tests, built-in microphones continued recording and storing clear audio while the screen was dark and appeared off. When disconnected from the network, audio and text files continued accumulating in local storage. Once internet restored, encrypted data uploaded to company servers. Voice prompts logged in plain text.

The Opt-Out Is a Fiction

Data collection routines operate automatically out of the box, meaning settings toggles for ACR or voice assistants provide no complete protection. There is no permission to revoke because it was never framed as one. It is firmware behavior.

Section 1201 of the Digital Millennium Copyright Act criminalizes circumvention of digital locks, preventing consumers from removing or disabling the surveillance software.

LG's terms of service put legal exposure squarely on you: "You acknowledge and agree that it is your sole responsibility to obtain all necessary consents from any third parties whose voices may be captured by the Product and to notify household members and guests that their voices may be captured and processed."

The device collects audio. You warn everyone in earshot. LG disclaims all liability.

Layer on the security exposure. webOS carries documented remote code execution vulnerabilities with zero-days in responsible disclosure. A compromised television could provide an attacker a foothold on a home or business network, access to audio, or a route to probe other devices.

The people running this operation deserve note. LG Ad Solutions' president of global ad sales previously ran Comscore, which the SEC charged in 2019 with inflating revenue by roughly $50 million. He personally paid a $700,000 penalty, repaid $2.1 million, and accepted a 10-year ban from running a public company. Nothing prevented him from running a private one.

If your endpoint detection treats the living room differently from the server closet, you have a blind spot 216 million devices wide.

Physical disconnection is the only mitigation with teeth. For a hotel chain, corporate campus, or multifamily operator with LG sets on every floor, that is a procurement crisis, not a settings menu.

What to watch: Whether class-action discovery names LG's internal communications about ACR scope; whether a carrier or ISP blocks the exfiltration traffic at the edge; whether LG's forthcoming Alphonso IPO faces disclosure scrutiny over this investigation; whether any regulator in a GDPR jurisdiction opens formal inquiry before the news cycle moves on; and how quickly enterprise procurement teams pull LG devices and at what cost.