Samsung TV ACR Data Harvest Fixed After Texas Lawsuit

Samsung’s Automatic Content Recognition (ACR) feature on Smart TVs was found to be silently capturing viewers’ content data and sending it to Samsung’s servers. The practice triggered privacy complaints and a consumer lawsuit in Texas, prompting Samsung to release a firmware update that disables ACR by default and to publish a step‑by‑step guide for users to turn the feature off globally.

For defenders, the episode highlights the risk of built‑in telemetry that can become a covert data‑exfiltration channel. Unpatched Smart TVs may expose viewing habits, location, and potentially other identifiers to external servers, providing threat actors with reconnaissance value. Organizations should inventory and patch all network‑connected displays, segment IoT devices, monitor outbound traffic for unusual patterns, and enforce policies to disable unnecessary telemetry features.

Source: Read original article