LG ThinQ Refrigerator

Why this rating

LG's privacy policy explicitly states it buys and sells data with marketing companies and data brokers including Facebook, Google and Amazon, and the SmartThinQ platform underlying ThinQ appliances suffered the HomeHack vulnerability exposing roughly a million devices to remote takeover including camera access.

What it is

• Microphone
• Camera
• Requires a cloud account
• Works offline

Manufacturer

LG Electronics

Category

Refrigerator

Model years

2017-present

Market status

Current

Companion app

LG ThinQ

The evidence 3

Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.

1. S4HomeHack: How Hackers Could Have Taken Control of LG's IoT Home Appliances
   Security advisory · Check Point Research · 2017-09-01

   Check Point researchers disclosed a vulnerability (HomeHack) in LG's SmartThinQ platform that could have let attackers remotely control LG appliances and access an internal camera.

   Why it matters here: Check Point's HomeHack disclosure directly targeted LG SmartThinQ-connected appliances including refrigerators.

2. S4Security Vulnerability: LG SmartThinQ Turns 1 Million Devices Into Digital Spies
   Security advisory · Bitdefender · 2017-09-01

   Additional coverage of the LG SmartThinQ HomeHack vulnerability that potentially exposed roughly a million connected appliances to remote hijacking.

   Why it matters here: Additional coverage of the LG SmartThinQ HomeHack vulnerability affecting roughly a million devices.

3. S3CVE-2026-15929: Improper neutralization of special elements used in an SQL command ('SQL injecti
   Security advisory · NIST NVD · 2026-07-30

   Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions.

   Why it matters here: Auto-promoted from review queue (source=nvd).