Update — September 10, 2026: The clip actually going viral now is the demonstration itself: researchers unplugging the Ethernet cable from a test LG TV, letting it sit disconnected, then plugging it back in on camera — and watching the buffered standby audio upload once the connection returns. That specific plug-it-back-in moment is what's spreading under tags like #unplugthetv on TikTok, alongside reaction videos of people literally unplugging their own TVs at the wall. The reporting consensus that's crystallized around the clip is blunt: fully unplugging the set from power is the only way to guarantee the hardware is inert — turning it "off" with the remote, or even pulling the network cable alone, isn't sufficient on its own, since the audio is buffered locally and just waits for the next reconnection to upload. See the added section below for what the demonstration shows step by step.
A Gamers Nexus investigation, published September 7, 2026 after a multi-hour breakdown working with independent security researchers, found that LG smart TVs can capture microphone audio in standby mode — after a remote's power button is pressed, not while genuinely powered down — and in one demonstration continued storing audio while disconnected from Wi-Fi, with that audio later retrievable once the TV reconnected. Separately, the TVs were found scanning the local network for other connected devices and collecting nearby Wi-Fi network names and signal data.
This is real, and it's worth taking seriously — but the more useful framing isn't "LG is uniquely evil," it's "this is what modern connected devices do by default, and LG's implementation happens to collect more than most." This post covers what's confirmed, what the underlying technology (ACR) actually is, and the much longer list of everyday devices already doing something similar.
TL;DR
| Question | Answer |
|---|---|
| What was found? | LG TVs recording microphone audio in standby mode, and even while disconnected from Wi-Fi in one demo, with audio retrievable once reconnected |
| What else? | Network scanning of other connected devices, plus collection of Wi-Fi names and signal information |
| What's the underlying system? | LG's "Live Plus" — its brand name for ACR (automatic content recognition), used to identify what's on screen and match it to ads/viewing profiles |
| Does turning off the mic fix it? | Not confirmed — a second microphone on some models reportedly isn't covered by the main mic toggle |
| Has LG responded? | No detailed public statement at the time of writing; reported RCE vulnerabilities are still under responsible disclosure |
| Is this LG-specific? | The audio/standby findings are LG-specific claims; ACR-based viewing data collection is standard across nearly every major smart TV brand |
What "standby mode" actually means here
It's worth being precise about the claim, because "spying even when off" oversimplifies a more specific and arguably more concerning finding. Modern smart TVs are rarely fully powered down when you press the remote's power button — they enter a standby state that keeps network connectivity, background processes, and (per this investigation) microphone access alive, so the TV can respond instantly to voice commands or a "turn on" signal without a multi-second boot delay. That's the same tradeoff behind "instant-on" behavior on most connected devices.
What Gamers Nexus demonstrated goes a step further than ordinary standby listening, though: audio capture that persisted even without an active Wi-Fi connection, buffered locally, and became retrievable once the TV reconnected to the network. That's a meaningfully different and more concerning claim than "the TV listens while idle" — it suggests local storage and delayed exfiltration, not just always-on processing while online.
The viral clip: what it actually shows
The specific footage now circulating breaks down into a simple, three-step demonstration, and that simplicity is exactly why it spread — no technical background needed to follow what's happening:
- Unplug. The test TV's Ethernet cable (or, in some versions, the power cord entirely) is pulled on camera while the set sits in standby.
- Wait. With the network connection severed, the TV keeps running locally — its microphone is still shown to be active, and any captured audio has nowhere to send.
- Reconnect. The moment the cable goes back in, the buffered audio uploads — visible in the researchers' own monitoring tools as a burst of outbound traffic immediately following reconnection.
That third step is the moment people are clipping and re-sharing: proof that "no internet connection" doesn't mean "no recording happening," just "no recording leaving yet." It's a more visceral, easier-to-share version of the original investigation's written findings, which is a large part of why the clip is outperforming the original multi-hour breakdown in raw reach.
The practical upshot repeated across the coverage that picked this up: pulling the network cable alone doesn't stop the behavior — it only delays the upload. Fully removing power is the one intervention the demonstration itself can't route around, since a TV with no power has no buffer to fill and nothing to send once it's back online.
What "Live Plus" and ACR actually do
ACR (automatic content recognition) is the umbrella technology, and nearly every major smart TV brand ships some version of it. It works by sampling what's currently displayed or playing — either a visual fingerprint of the screen or an audio fingerprint of what's being heard — and matching that fingerprint against a reference database to identify the specific show, movie, or advertisement in real time. That identification is the foundation for targeted advertising, viewership measurement, and the "you watched X, here's a recommendation for Y" features built into nearly every modern TV interface.
LG brands its version Live Plus. What the investigation flagged as unusual isn't ACR's existence — it's the reported scope of collection layered on top: identifying other devices connected to the same network, gathering Wi-Fi network names and signal strength data, and combining that with advertising identifiers to build what researchers described as a detailed profile of household viewing habits and which devices are present and active at different times. That combination — what you watch, plus what's on your network, plus when — is a materially richer profile than ACR alone typically produces.
The parts LG hasn't addressed
Two details from the investigation remain unresolved as of this writing:
- A possible second microphone. Disabling the primary microphone toggle in settings reportedly may not disable a secondary microphone present in some models — meaning the setting most people would reach for first doesn't necessarily do what its label implies.
- Remote code execution vulnerabilities. Researchers identified RCE flaws and reported them to LG through responsible disclosure, but full technical details are being withheld until a fix ships, and LG has not published a comprehensive public response addressing the findings.
Both are reasons to treat this as an evolving story rather than a fully closed case — check for firmware updates and LG's own statements in the weeks following this investigation rather than assuming the picture is complete today.
What else is tracking you: the rest of your smart home
The uncomfortable truth this investigation surfaces is that LG's TVs are not an outlier for having tracking capability — they're notable for how much they reportedly do with it. Nearly every category of connected consumer device collects more than most owners realize:
| Device category | What it typically collects |
|---|---|
| Smart TVs (any brand) | ACR-based viewing fingerprints are standard across Samsung, Sony, Vizio, TCL, and Roku TVs, not just LG — the industry-wide default is "on unless you find and disable it" |
| Smart speakers and voice assistants | Voice recordings are retained by default on most platforms; wake-word detection runs continuously on-device, and some portion of recordings have historically been reviewed by human contractors for quality assurance across multiple vendors |
| Robot vacuums | Build detailed floor-plan maps of your home's layout as part of normal navigation, and several vendors have faced scrutiny over whether that map data is shared with or sold to third parties |
| Video doorbells and home security cameras | Frequently include law-enforcement data-sharing partnerships or request programs baked into the platform, sometimes enabled by default or with limited visibility into what triggers a share |
| Connected cars | Modern vehicles log detailed GPS location history, driving behavior (harsh braking, speed), and in some cases in-cabin audio/video — data that has been reported sold to insurance companies and data brokers |
| Smart thermostats and appliances | Occupancy patterns (when you're home), usage habits, and sometimes voice or camera data on higher-end models, feeding into energy-company or manufacturer analytics programs |
| Printers and other "dumb" IoT devices | Increasingly ship with cloud connectivity and telemetry by default, often with less scrutiny than higher-profile categories precisely because they're not expected to be "smart" |
The pattern across nearly all of these: data collection is on by default, disclosed in a privacy policy few people read, and the opt-out — when one exists — is buried several menus deep rather than presented at setup.
What to actually do about it
- Go into your TV's settings and disable ACR-equivalent features specifically. Look for "Live Plus" (LG), "Viewing Information Services" (Samsung), "Smart Interactivity" (Vizio/other brands), or generically "Interest-Based Advertising" — the exact name varies by brand and model year, so check your specific device's support page rather than assuming one universal menu path.
- Put smart devices on a separate network segment. A guest or IoT-specific Wi-Fi network limits what a compromised or over-collecting device can see about the rest of your home network — exactly the kind of device-scanning behavior this investigation flagged.
- Install firmware updates promptly, especially after a security disclosure like this one — LG's eventual fix for the reported RCE vulnerabilities will only help if it's actually installed.
- Physically cover or unplug microphones/cameras on devices you don't actively use for voice or video features — the most reliable mitigation for any device, regardless of what its software settings claim to control.
- Treat "off" and "standby" as different states on any modern connected device. If genuine full power-down matters to you (overnight, when traveling), unplugging remains the only guaranteed way to achieve it.
Why this keeps happening, structurally
It's worth stepping back from LG specifically to name the underlying business incentive, because it's the same incentive across every device category in the table above. Hardware margins on TVs, speakers, and many other connected devices have thinned considerably as manufacturing costs and competition have driven prices down — and the data collected through features like ACR is frequently the mechanism that makes selling hardware at a thin or even loss-leading margin viable in the first place, because the resulting viewership and household data gets monetized separately through advertising and analytics partnerships.
That structural incentive is why disabling these features tends to be an opt-out buried in settings rather than an opt-in choice presented clearly at setup: a manufacturer whose business model depends partly on data collection has little incentive to make disabling it the default or even particularly easy to find. Understanding that incentive doesn't make the specific LG findings less concerning, but it does explain why this pattern shows up so consistently across brands and device categories rather than being a one-off design choice any single company could simply reverse without changing its underlying business model.
What to watch next
- Whether LG issues a firmware update addressing the reported RCE vulnerabilities and publishes a detailed public response to the investigation's specific claims.
- Whether regulators in the US or EU open a formal inquiry, given the scale of LG's installed base and the specificity of the standby-audio and disconnected-storage claims.
- Whether other TV manufacturers face similar scrutiny once researchers apply the same investigative methodology to their ACR implementations.
Related reading
- Digital Camouflage: The Adversarial Shirt That Beats AI Person-Detection Cameras
- SweepLED: KAIST's $7 AI Hidden Camera Detector
- What Is C2PA Content Credentials, Explained
- C2PA on Android Cameras Is Broken — AI Forgery Risk
- Anthropic Says Claude Models Were Used in 15 Real-World System Breaches
This post reflects Gamers Nexus's investigation published September 7, 2026, and reporting from Malwarebytes, Notebookcheck, and other outlets covering it, as of September 10, 2026. LG has not published a comprehensive public response to the specific findings at the time of writing; details may be updated as the story develops.