Skip to main content

Internet-connected hot tubs can be hacked and controlled remotely

Lars Plougmann/Flickr

Hot tubs are supposed to be a great way to relax, but that’s a little harder to do when you aren’t in control of them. Thousands of hot tubs running a system made by Balboa Water Group have exploits that can be hacked to allow malicious actors to remotely control them, according to a recent report from the BBC.

The issue, discovered by security researchers at the U.K.-based security firm Pen Test Partners, stems from lapses in a mobile app that enables hot tub owners to control their tubs from their phone. Attackers could theoretically gather information found on public resources to find homes with the vulnerable hot tubs and target them. The malicious actors could use third-party databases to find the GPS location data of a given tub and hijack it. There is no authentication that would prevent the attackers from getting into the system.

Once the attackers have picked their target, they can assume control of the tub remotely. That means they can make the temperature hotter or colder, take over the pumps and jets, and change the lights. The entire attack can be carried out over a smartphone or laptop.

According to the BBC, Balboa Water Group was caught off guard by the report and said it was “surprised” to learn of the vulnerability. The mobile app that gives users the ability to remotely control their hot tub has been available for about five years and users have never reported any issues or hacking attempts, according to the company.

Balboa Water Group is in the process of addressing the security flaw and plans to have it patched up by the end of February — which is a long time to leave a known flaw unpatched and available to exploit. The company is working with its customers to set up individual usernames and passwords so they can secure their apps. It previously opted not to have users set up personal accounts because it wanted to simplify the activation process. While that might have made things more convenient, the decision also exposed users to having their personal time in the hot tub interrupted by hackers.

Editors' Recommendations

AJ Dellinger
AJ Dellinger is a freelance reporter from Madison, Wisconsin with an affinity for all things tech. He has been published by…
Get this Roomba robot vacuum for $160 instead of the usual $275
iRobot Roomba 694 Robot Vacuum cleaning a foyer.

Crutchfield is currently selling an iRobot Roomba 694 robot vacuum for a fantastic discount. Usually costing $275, it’s down to just $160 for a very limited time only. One of the best robot vacuum deals around, the sale is only on until March 16 so you haven’t got long to snap one up. If you’re keen to streamline the cleaning process at home, check it out now before the sale ends.

Why you should buy the iRobot Roomba 694 robot vacuum
The Roomba range provides some of the best robot vacuums around meaning it’s the perfect brand to consider. With the iRobot Roomba 694, you get a 3-stage cleaning system with an edge-sweeping brush, dual roller brushes, and powerful suction. Alongside that, there are Dirt Detect sensors that inform it when it needs to give more attention to dirtier parts of your home.

Read more
The Blink Mini 2 features an updated design, support for outdoor use
The Blink Mini 2 placed on two books.

The original Blink Mini was one of the best indoor cameras thanks to its affordable price, 1080p resolution, and support for Alexa. Now, Amazon is making the gadget even more enticing with the new Blink Mini 2, which boasts a sleek new design and is capable of working both indoors and outside in the elements.

While it's still small and compact, the Blink Mini 2 looks slightly different from the old Blink Mini. Its corners are much softer, its entire chassis is white (instead of a white chassis and black faceplate), and its camera takes up a bit more space on the front of the device. The differences are apparent when the two gadgets are placed side by side -- and the minor changes add up to make the Blink Mini 2 look a bit more premium than its older sibling.

Read more
This 4-camera Lorex wireless video surveillence system is $200 off
A Lorex 2K Wireless camera mounted on an outside wall.

One of the best security camera deals today is over at Crutchfield with $200 off the Lorex 2K Wireless NVR System. Usually priced at $550, it’s down to a fantastic $350 until March 17. That means you don’t have very long to enjoy the significant discount. If you need to know more, we’re here to help with some insight about the security system below. Remember to buy it before March 17 if it sounds like the right setup for you.

Why you should buy the Lorex 2K Wireless NVR System
Sure to be one of the best home security camera systems for many people, the Lorex 2K Wireless NVR System is packed with features. It comes with an easy-to-use network video recorder along with four weather-resistant 2K cameras which are battery-powered and wireless. Any time the cameras notice motion, you’ll get a notification to your smartphone. You can then opt to view the live feed as well as talk to anyone on the other side. Its motion-based detection system does a great job of highlighting things only when there are people rather than objects, cutting down on false alarms.

Read more