Samsung TV Spying Claims: What the Log4j Report Says

A security researcher's thread about their own Samsung TV has turned into one of the week's most talked-about privacy stories. The researcher, who posts on X as log4j, says they broke into a 2025 Samsung TV using a previously unknown flaw and found extensive data collection and ad-targeting code inside its Tizen operating system. Searches for "Samsung TV log4j" passed 10,000 in the U.S. on Google Trends. The claims are serious, but they are still claims: no full report has been published, independent testing has been limited and Samsung had not responded publicly as of Oct. 26, 2026. Here is what was alleged, what has been checked and what you can do.

What we know

The posts began on Oct. 21, 2026. "i own a relatively new (2025) samsung tv. i kept getting weirdly targeted ads," log4j wrote, according to Tom's Hardware. Because the firmware was encrypted, the researcher said they used "zero days" to get a root shell, meaning full administrative control of the TV, and "discovered PRIVACY HORROR."

Sources: Tom's Hardware; Notebookcheck; NeoTeo.

The alleged services

According to NeoTeo, the Oct. 21 post listed alleged always-on microphone functionality, automatic content recognition (ACR), geolocation, network mapping, an ad-targeting service, four digital rights management (DRM) services, user-profile building and telemetry. ACR is technology that identifies what is playing on the screen.

Tom's Hardware reported the researcher's further claims: that the TV processes audio, screenshots and a cross-device advertising ID; that it loads a region-specific neural network that tracks behavior such as which videos are watched and which ads are skipped; and that TVs without microphones look for connected devices with one, such as a soundbar.

Sound detection: advertised, but with a twist

Some of this overlaps with features Samsung openly sells. Notebookcheck notes Samsung advertises Pet Care and Family Care on its 2025 Vision AI TVs, which use on-device AI to detect barking or crying and send alerts through SmartThings. The researcher says counts of those events, under an event called "EV201/SOUNDSENSOR_ON," are also logged to Samsung's cloud servers, something Samsung does not explicitly mention, Notebookcheck said. The researcher's own notes say the counters do not prove an alert was ever shown.

The microphone test

Hugging Face engineer Xuan-Son Nguyen (@ngxson) tried to check the microphone claim. On Oct. 23, he reported that the TV "opens the mic for exactly 5 seconds then stop," with no further recording during his observation. The next day, he called the test inconclusive, NeoTeo reported, noting his TV was already rooted and had several settings disabled, so an unmodified TV might behave differently.

A side story: the OpenAI ban

Tom's Hardware reported that log4j used OpenAI tools in the work and that OpenAI later banned the account for cyber abuse, according to an email the researcher received. Log4j said the tools were used only for local reverse engineering, not to exploit or find vulnerabilities.

What Samsung's policy says

Samsung's SmartTV privacy supplement says that if you enable collection of information about video streams viewed on the TV, Samsung may collect information about the networks, channels and programs you watch. It says voice commands are collected when you press the activation button and speak into the remote's microphone, and that you can disable voice recognition data collection in settings. Whether the TV's behavior matches those descriptions is exactly what the researcher's claims call into question, and it has not been independently established.

Context: smart TVs and data collection

Samsung is not the only TV maker under scrutiny. Notebookcheck pointed to a September investigation by Gamers Nexus that showed LG smart TVs mapping devices on home networks and capturing microphone audio in standby, and Tom's Hardware noted that LG has also faced accusations of spying on customers.

Tom's Guide says Samsung's viewing-data feature, which uses ACR to identify what you watch across inputs, is opt-in on current models rather than enabled by default, and that voice recognition is opt-in on 2025 Samsung TVs, though this varies by model year. Interest-based advertising is linked to that viewing data. If you accepted the default prompts during setup without reading them closely, Tom's Guide says, some of these features may be on.

Tom's Hardware also noted that many owners have complained about sluggish TVs; the researcher theorizes heavy background data processing could be one reason, which is another claim that has not been tested independently.

How to limit tracking on a Samsung TV

Tom's Guide gives these steps (menu names can vary by model year):

1. Press Home and go to Settings > Support > Terms & Privacy > Privacy Choices.
2. Turn off Viewing Information Services to stop ACR viewing tracking.
3. Turn off Interest-Based Advertising. You will still see ads, but not ones based on your viewing history.
4. Turn off Voice Recognition Services if you don't use voice control.

What's next

1. The full write-up. Notebookcheck says the researcher has promised a write-up of about 44 sections; Tom's Hardware says it will include how others can reproduce the work.
2. Samsung's response. Watch for a statement or a firmware update addressing the claimed zero-day.
3. More tech news. See our report on the iPhone Duo broken screen issue and our explainer on OpenAI's GPT-6.1 Terra.

The bottom line

The log4j thread raises real questions about how much data smart TVs collect, but most of it remains unverified. Until a full report or a Samsung response arrives, the practical step is to review your TV's Privacy Choices menu.